Version 4.1.2

system/Login/Convert.php

@@ -418,6 +418,14 @@ class _Convert extends LoginAbstract
 	 */
 	protected function joomla( $member, $password )
 	{
+		/* Joomla 3 */
+		if( preg_match( '/^\$2[ay]\$(0[4-9]|[1-2][0-9]|3[0-1])\$[a-zA-Z0-9.\/]{53}/', $member->conv_password ) )
+		{
+			$ph = new PasswordHash( 8, TRUE );
+			return $ph->CheckPassword( $password, $member->conv_password ) ? TRUE : FALSE;
+		}
+
+		/* Joomla 2 */
 		if ( \IPS\Login::compareHashes( $member->conv_password, md5( $password . $member->misc ) ) )
 		{
 			return TRUE;
@@ -1375,7 +1383,6 @@ class webWizAuth
 		if ( \strlen( $strSecret ) == 0 || \strlen( $strSecret ) >= pow( 2, 61 ) )
 		{
 			return "0000000000000000000000000000000000000000";
-			break;
 		}
 		
 		//Initial Hex words are used for encoding Digest.