脆弱性修理

app/Http/Controllers/AuthController.php

@@ -400,7 +400,7 @@ class AuthController extends Controller {
         $checkPass = hash('sha256', $checkPass . $checkName->salt);
       }
 
-      if ($checkPass === $checkName->password) {
+      if (hash_equals($checkPass, $checkName->password)) {
         return array(
           'uid' => $checkName->id,
           'username' => $checkName->username,