Version 4.1.19

applications/core/modules/front/system/unsubscribe.php

@@ -2,9 +2,9 @@
 /**
  * @brief		Allow users to unsubscribe from site updates
  * @author		<a href='http://www.invisionpower.com'>Invision Power Services, Inc.</a>
- * @copyright	(c) 2001 - SVN_YYYY Invision Power Services, Inc.
+ * @copyright	(c) 2001 - 2016 Invision Power Services, Inc.
  * @license		http://www.invisionpower.com/legal/standards/
- * @package		IPS Social Suite
+ * @package		IPS Community Suite
  * @since		12 Jun 2013
  * @version		SVN_VERSION_NUMBER
  */
@@ -44,7 +44,7 @@ class _unsubscribe extends \IPS\Dispatcher\Controller
 		}
 
 		/* Verify the key is correct */
-		if ( \IPS\Request::i()->key == md5( $member->email . ':' . $member->members_pass_hash ) )
+		if ( \IPS\Login::compareHashes( md5( $member->email . ':' . $member->members_pass_hash ), (string) \IPS\Request::i()->key ) )
 		{
 			/* Set the member not to receive future emails */
 			$member->allow_admin_mails	= 0;