diff --git a/mail4one/pop3.py b/mail4one/pop3.py index 23e00ba..3896da2 100644 --- a/mail4one/pop3.py +++ b/mail4one/pop3.py @@ -69,7 +69,9 @@ def write(data): def validate_password(password): - if not compare_digest(Session.password_hash, sha256(password.encode()).hexdigest()): + salt = "balki is awesome+" + salted = f"{salt}{password}" + if not compare_digest(Session.password_hash, sha256(salted.encode()).hexdigest()): raise AuthError("Invalid user pass")