From 45731a4e60bfeda4036398783351f49e4cdd07f1 Mon Sep 17 00:00:00 2001
From: Angie Byron <webchick@24967.no-reply.drupal.org>
Date: Fri, 22 May 2009 07:39:09 +0000
Subject: #398902 by kscheirer and alexanderpas: Type-check passwords.

---
 includes/form.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'includes')

diff --git a/includes/form.inc b/includes/form.inc
index c5803b46e..83392a3f7 100644
--- a/includes/form.inc
+++ b/includes/form.inc
@@ -1651,7 +1651,7 @@ function password_confirm_validate($form, &$form_state) {
   $pass1 = trim($form['pass1']['#value']);
   if (!empty($pass1)) {
     $pass2 = trim($form['pass2']['#value']);
-    if ($pass1 != $pass2) {
+    if (strcmp($pass1, $pass2)) {
       form_error($form, t('The specified passwords do not match.'));
     }
   }
-- 
cgit v1.2.3