add . to valid bcrypt hash charlist

zendframework · Mar 17, 2015 · 7a35320 · 7a35320
1 parent 63a2317
commit 7a35320
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/library/Zend/Crypt/Password/Apache.php b/library/Zend/Crypt/Password/Apache.php
@@ -141,7 +141,7 @@ public function verify($password, $hash)
             return Utils::compareStrings($hash, $hash2);
         }
 
-        $bcryptPattern = '/\$2[ay]?\$[0-9]{2}\$[' . addcslashes(static::BASE64, '+/') . ']{53}/';
+        $bcryptPattern = '/\$2[ay]?\$[0-9]{2}\$[' . addcslashes(static::BASE64, '+/') . '\.]{53}/';
 
         if (strlen($hash) > 13 && ! preg_match($bcryptPattern, $hash)) { // digest
             if (empty($this->userName) || empty($this->authName)) {