Live Chat Software by Kayako |
Knowledgebase: Upgrade questions
|
Where/how do I enable password hashing to avoid storing passwords as plain text ?
Posted by Esvon Support on 03 July 2012 09:11 PM
|
|
|
If you're running "Esvon Classifieds" 4.0.11 or later, user profiles can be stored in a database with hashed passwords. To switch from storing passwords as plain text to hashed passwords you can do the following: 1/ Make sure your inc/settings.ini file has line PWD_HASHED = "0" [if it doesn't, you run older version or upgrade wasn't done correctly] 2/ Prepare PHP file with the following code [update_pwd.php] : require './inc/application.php'; $O_HW->Update( array('PWD_HASHED' => '1') ); $db->query('UPDATE '.TBL_USER.' SET pwd=MD5(pwd) WHERE LENGTH(pwd)<32'); ?> 3/ Place this file into script dir (where index.php resides), run it from web browser and delete after this | |
|
|
|
Comments (0)