Changeset 18889 for trunk/password.php

Timestamp:

Nov 2, 2012, 2:59:07 PM (11 years ago)

Author:

plg

Message:

feature 2727: improve password security with the use of PasswordHash class.
This class performs salt and multiple iterations. Already used in Wordpress,
Drupal, phpBB and many other web applications.

$confpass_convert is replaced by $confpassword_hash + $confpassword_verify

File:

• trunk/password.php (modified) (1 diff)

trunk/password.php

@@ -222 +222 @@
   single_update(
     USERS_TABLE,
-    array($conf['user_fields']['password'] => $conf['pass_convert']($_POST['use_new_pwd'])),
+    array($conf['user_fields']['password'] => $conf['password_hash']($_POST['use_new_pwd'])),
     array($conf['user_fields']['id'] => $user_id)
     );