diff --git a/system/arr.php b/system/arr.php index 24be1f2b..ba3875e5 100644 --- a/system/arr.php +++ b/system/arr.php @@ -5,6 +5,8 @@ class Arr { /** * Get an item from an array. * + * If the specified key is null, the entire array will be returned. + * * @param array $array * @param string $key * @param mixed $default diff --git a/system/auth.php b/system/auth.php index 9e247094..4fd8fcc8 100644 --- a/system/auth.php +++ b/system/auth.php @@ -64,11 +64,7 @@ class Auth { if ( ! is_null($user)) { - // If a salt is present on the user record, we will recreate the hashed password - // using the salt. Otherwise, we will just use a plain hash. - $password = (isset($user->salt)) ? Hash::make($password, $user->salt)->value : sha1($password); - - if ($user->password === $password) + if ($user->password === Hash::make($password, $user->salt)->value) { static::$user = $user; @@ -89,6 +85,7 @@ class Auth { public static function logout() { Session::forget(static::$key); + static::$user = null; }