From 0c2b2cbe82c30bf5fba6c9dae8d28549cfe9e347 Mon Sep 17 00:00:00 2001
From: Jayan Ratna <30396013+jayan-blutui@users.noreply.github.com>
Date: Thu, 3 Nov 2022 12:16:44 +1300
Subject: [PATCH] Update parameter order for hash_equals function

---
 src/Http/Requests/TwoFactorLoginRequest.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Http/Requests/TwoFactorLoginRequest.php b/src/Http/Requests/TwoFactorLoginRequest.php
index 8428b6e5..ad14b4a3 100644
--- a/src/Http/Requests/TwoFactorLoginRequest.php
+++ b/src/Http/Requests/TwoFactorLoginRequest.php
@@ -75,7 +75,7 @@ public function validRecoveryCode()
         }
 
         return tap(collect($this->challengedUser()->recoveryCodes())->first(function ($code) {
-            return hash_equals($this->recovery_code, $code) ? $code : null;
+            return hash_equals($code, $this->recovery_code) ? $code : null;
         }), function ($code) {
             if ($code) {
                 $this->session()->forget('login.id');