From 03e2f6fb30d148ec53add4ea76e78ee4df9c60f9 Mon Sep 17 00:00:00 2001
From: Andrew Nacin <wp@andrewnacin.com>
Date: Fri, 21 Jun 2013 01:21:12 +0000
Subject: [PATCH] Add strict check to phpass's CheckPassword() method to avoid
 issues when the method is improperly called.

git-svn-id: http://core.svn.wordpress.org/trunk@24457 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-includes/class-phpass.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wp-includes/class-phpass.php b/wp-includes/class-phpass.php
index dcdf3803b5..2fed5d7685 100644
--- a/wp-includes/class-phpass.php
+++ b/wp-includes/class-phpass.php
@@ -253,7 +253,7 @@ class PasswordHash {
 		if ($hash[0] == '*')
 			$hash = crypt($password, $stored_hash);
 
-		return $hash == $stored_hash;
+		return $hash === $stored_hash;
 	}
 }