add salt

2018-12-19 02:41:20 -05:00
parent ba33ced6ab
commit 54ab1c7f98
1 changed files with 3 additions and 1 deletions
--- a/mail4one/pop3.py
+++ b/mail4one/pop3.py
@@ -69,7 +69,9 @@ def write(data):


 def validate_password(password):
-    if not compare_digest(Session.password_hash, sha256(password.encode()).hexdigest()):
+    salt = "balki is awesome+"
+    salted = f"{salt}{password}"
+    if not compare_digest(Session.password_hash, sha256(salted.encode()).hexdigest()):
        raise AuthError("Invalid user pass")