Version 4.5.0

system/Login/Handler/UsernamePasswordHandler.php

@@ -12,7 +12,7 @@
 namespace IPS\Login\Handler;
 
 /* To prevent PHP errors (extending class does not exist) revealing path */
-if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
+if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
 {
 	header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
 	exit;
@@ -66,8 +66,8 @@ trait UsernamePasswordHandler
 	 * Authenticate
 	 *
 	 * @param	\IPS\Login	$login				The login object
-	 * @param	string		$usernameOrEmail	The username or email address provided by the user
-	 * @param	string		$password			The plaintext password provided by the user
+	 * @param	string		$usernameOrEmail		The username or email address provided by the user
+	 * @param	object		$password			The plaintext password provided by the user, wrapped in an object that can be cast to a string so it doesn't show in any logs
 	 * @return	\IPS\Member
 	 * @throws	\IPS\Login\Exception
 	 */
@@ -77,7 +77,7 @@ trait UsernamePasswordHandler
 	 * Authenticate
 	 *
 	 * @param	\IPS\Member	$member				The member
-	 * @param	string		$password			The plaintext password provided by the user
+	 * @param	object		$password			The plaintext password provided by the user, wrapped in an object that can be cast to a string so it doesn't show in any logs
 	 * @return	bool
 	 */
 	abstract public function authenticatePasswordForMember( \IPS\Member $member, $password );