Fix #1 Wrong arguments for password_verify()

pH-7 · pH-7 · commit 984085264c44 · 2017-07-03T04:26:34.000+01:00
diff --git a/Controller/Admin.php b/Controller/Admin.php
@@ -20,8 +20,8 @@ public function login()
             $this->oUtil->getModel('Admin');
             $this->oModel = new \TestProject\Model\Admin;
 
-            $sDbPassword =  $this->oModel->login($_POST['email']);
-            if (password_verify($sDbPassword, $_POST['password']))
+            $sHashPassword =  $this->oModel->login($_POST['email']);
+            if (password_verify($_POST['password'], $sHashPassword))
             {
                 $_SESSION['is_logged'] = 1; // Admin is logged now
                 header('Location: ' . ROOT_URL . '?p=blog&a=all');
