We need to hash the input to compare it to a hash

PennyDreadfulMTG · Jan 27, 2024 · 1e97300 · 1e97300
1 parent aa93906
commit 1e97300
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/gatherling/api_lib.php b/gatherling/api_lib.php
@@ -67,7 +67,7 @@ function auth()
     if (is_null($player)) {
         return "Can't find a user called $username";
     }
-    if ($player->api_key == $apikey) {
+    if ($player->api_key == hash('sha256', $apikey)) {
         $_SESSION['username'] = $player->name;
     } else {
         return 'Invalid API Key';