7 files changed, 7 insertions, 7 deletions
diff --git a/phpBB/phpbb/passwords/driver/bcrypt_wcf2.php b/phpBB/phpbb/passwords/driver/bcrypt_wcf2.php
index fe6e36406e..f706c7af69 100644
--- a/phpBB/phpbb/passwords/driver/bcrypt_wcf2.php
+++ b/phpBB/phpbb/passwords/driver/bcrypt_wcf2.php
@@ -65,7 +65,7 @@ class bcrypt_wcf2 extends base
 	*/
 	public function check($password, $hash, $user_row = array())
 	{
-		if (empty($hash))
+		if (empty($hash) || strlen($hash) != 60)
 		{
 			return false;
 		}
diff --git a/phpBB/phpbb/passwords/driver/md5_mybb.php b/phpBB/phpbb/passwords/driver/md5_mybb.php
index dceffe8e68..0745bceb5e 100644
--- a/phpBB/phpbb/passwords/driver/md5_mybb.php
+++ b/phpBB/phpbb/passwords/driver/md5_mybb.php
@@ -47,7 +47,7 @@ class md5_mybb extends base
 	*/
 	public function check($password, $hash, $user_row = array())
 	{
-		if (empty($hash) || !isset($user_row['user_passwd_salt']))
+		if (empty($hash) || strlen($hash) != 32 || !isset($user_row['user_passwd_salt']))
 		{
 			return false;
 		}
diff --git a/phpBB/phpbb/passwords/driver/md5_vb.php b/phpBB/phpbb/passwords/driver/md5_vb.php
index e15680222d..440b9e39e9 100644
--- a/phpBB/phpbb/passwords/driver/md5_vb.php
+++ b/phpBB/phpbb/passwords/driver/md5_vb.php
@@ -47,7 +47,7 @@ class md5_vb extends base
 	*/
 	public function check($password, $hash, $user_row = array())
 	{
-		if (empty($hash) || !isset($user_row['user_passwd_salt']))
+		if (empty($hash) || strlen($hash) != 32 || !isset($user_row['user_passwd_salt']))
 		{
 			return false;
 		}
diff --git a/phpBB/phpbb/passwords/driver/sha1.php b/phpBB/phpbb/passwords/driver/sha1.php
index 35df1ebe96..5d6c93f6a8 100644
--- a/phpBB/phpbb/passwords/driver/sha1.php
+++ b/phpBB/phpbb/passwords/driver/sha1.php
@@ -47,6 +47,6 @@ class sha1 extends base
 	*/
 	public function check($password, $hash, $user_row = array())
 	{
-		return $hash === sha1($password);
+		return (strlen($hash) == 40) ? $hash === sha1($password) : false;
 	}
 }
diff --git a/phpBB/phpbb/passwords/driver/sha1_smf.php b/phpBB/phpbb/passwords/driver/sha1_smf.php
index 6cc0841f4d..3e3322d77f 100644
--- a/phpBB/phpbb/passwords/driver/sha1_smf.php
+++ b/phpBB/phpbb/passwords/driver/sha1_smf.php
@@ -46,6 +46,6 @@ class sha1_smf extends base
 	*/
 	public function check($password, $hash, $user_row = array())
 	{
-		return $hash === $this->hash($password, $user_row);
+		return (strlen($hash) == 40) ? $hash === $this->hash($password, $user_row) : false;
 	}
 }
diff --git a/phpBB/phpbb/passwords/driver/sha1_wcf1.php b/phpBB/phpbb/passwords/driver/sha1_wcf1.php
index 77168e70eb..04a69705e9 100644
--- a/phpBB/phpbb/passwords/driver/sha1_wcf1.php
+++ b/phpBB/phpbb/passwords/driver/sha1_wcf1.php
@@ -47,7 +47,7 @@ class sha1_wcf1 extends base
 	*/
 	public function check($password, $hash, $user_row = array())
 	{
-		if (empty($hash) || !isset($user_row['user_passwd_salt']))
+		if (empty($hash) || strlen($hash) != 40 || !isset($user_row['user_passwd_salt']))
 		{
 			return false;
 		}
diff --git a/phpBB/phpbb/passwords/driver/sha_xf1.php b/phpBB/phpbb/passwords/driver/sha_xf1.php
index 08b8cecaf3..7ae0b90f51 100644
--- a/phpBB/phpbb/passwords/driver/sha_xf1.php
+++ b/phpBB/phpbb/passwords/driver/sha_xf1.php
@@ -47,7 +47,7 @@ class sha_xf1 extends base
 	*/
 	public function check($password, $hash, $user_row = array())
 	{
-		if (empty($hash) || !isset($user_row['user_passwd_salt']))
+		if (empty($hash) || (strlen($hash) != 40 && strlen($hash) != 64) || !isset($user_row['user_passwd_salt']))
 		{
 			return false;
 		}