From 41ea63281c23c29c5730cbad90e7f085c59717e8 Mon Sep 17 00:00:00 2001 From: Starbeamrainbowlabs Date: Thu, 10 May 2018 23:30:00 +0100 Subject: [PATCH] Skip the password hashing cost recheck if it's been disabled --- modules/page-login.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/modules/page-login.php b/modules/page-login.php index b17ab51..d9e3f87 100644 --- a/modules/page-login.php +++ b/modules/page-login.php @@ -153,7 +153,10 @@ function do_password_hash_code_update() { // There's no point if we're using Argon2i, as it doesn't take a cost if(hash_password_properties()["algorithm"] == PASSWORD_ARGON2I) return; - + + // Skip rechecking if the automatic check has been disabled + if($settings->password_cost_time_interval == -1) + return; // Skip the recheck if we've done one recently if(isset($settings->password_cost_time_lastcheck) && time() - $settings->password_cost_time_lastcheck < $settings->password_cost_time_interval)