@@ -, +, @@ - Before applying the patch, create a user with a password "μμμμ" - apply patches - try to log in - change the password - log out - try to log in --- C4/Auth.pm | 4 ++++ Koha/AuthUtils.pm | 3 +++ 2 files changed, 7 insertions(+) --- a/C4/Auth.pm +++ a/C4/Auth.pm @@ -32,6 +32,7 @@ use C4::VirtualShelves; use Koha::AuthUtils qw(hash_password); use POSIX qw/strftime/; use List::MoreUtils qw/ any /; +use Encode qw( encode is_utf8); # use utf8; use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS $debug $ldap $cas $caslogout); @@ -1542,6 +1543,9 @@ sub checkpw { sub checkpw_internal { my ( $dbh, $userid, $password ) = @_; + $password = Encode::encode( 'UTF-8', $password ) + if Encode::is_utf8($password); + my $sth = $dbh->prepare( "select password,cardnumber,borrowernumber,userid,firstname,surname,branchcode,flags from borrowers where userid=?" --- a/Koha/AuthUtils.pm +++ a/Koha/AuthUtils.pm @@ -19,6 +19,7 @@ package Koha::AuthUtils; use Modern::Perl; use Crypt::Eksblowfish::Bcrypt qw(bcrypt en_base64); +use Encode qw( encode is_utf8 ); use Fcntl qw/O_RDONLY/; # O_RDONLY is used in generate_salt use base 'Exporter'; @@ -51,6 +52,8 @@ user passwords. # Using Bcrypt method for hashing. This can be changed to something else in future, if needed. sub hash_password { my $password = shift; + $password = Encode::encode( 'UTF-8', $password ) + if Encode::is_utf8($password); # Generate a salt if one is not passed my $settings = shift; --