Using SHA1 instead of md5 for password hashing [Q and A]

Using SHA1 instead of md5 for password hashing

2004/6/7 21:22
lukeduff
Just popping in
Posts: 2
Since: 2004/6/7 2

I'm importing a few thousand users from another system into XOOPS. I noticed that XOOPS uses md5 to hash passwords, and the system I'm importing from used sha1 to hash.

Can I just hack the couple lines in /include/checklogin.php, /kernel/member.php, lostpass.php, modules/system/admin/users/users.php that mention md5 to sha1 and have everything work? Any other gotchas?

Re: Using SHA1 instead of md5 for password hashing

2004/6/7 22:13
Dave_L
XOOPS is my life!
Posts: 2277
Since: 2003/11/7

That sounds reasonable, if you've located all the places in the code that use md5() to encode the user password.

The database column xoops_users.pass would also have to be changed from varchar(32) to varchar(40).

Re: Using SHA1 instead of md5 for password hashing

2004/6/8 14:34
lukeduff
Just popping in
Posts: 2
Since: 2004/6/7 2

Thanks. I forgot that sha1 hashes were longer.

Stats
Goal:	$100.00
Due Date:	Aug 31
Gross Amount:	$0.00
Net Balance:	$0.00
Left to go:	$100.00

Using SHA1 instead of md5 for password hashing

Re: Using SHA1 instead of md5 for password hashing

Re: Using SHA1 instead of md5 for password hashing

Login

Search

Recent Posts

XOOPS 2.5.12 Beta-2 available for Testing

PHP 8.4.0 Alpha 1 released

Overview of the Composer packages in Admin

Re: xoops_getBaseDomain

xoops_getBaseDomain

Re: Test 3

Test 3

Re: Test2

Re: Test2

Re: Test2

Who's Online

Donat-O-Meter

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}