Radicore Forum
Fast Uncompromising Discussions. FUDforum will get your users talking.
Home » RADICORE development » Bug Reports » login fails after upgrade to ver 1.42 (if passwords stored as plain text (workround details outlined))
login fails after upgrade to ver 1.42 [message #1927] Sun, 28 December 2008 16:25 Go to previous message
David Lee is currently offline  David Lee
Messages: 44
Registered: June 2006
Member
I upgraded a system that stored passwords as plain text Sad , including updating the menu database and table. After this, I could not log in.

I think that the update to the menu database reset the password storage to encrypted. I have solved my problem by


  • Edit the config.inc file to output all sql queries
  • Try logging in as a user - this fails
  • extract the encrypted password from the saved sql query
  • replace the plain text password in the menu database with the encrypted password, using, in my case phpmyadmin


This needs repeating for all users with plain text passwords

Generally, the best option is do not use plain text passwords. As this is a one-time problem, I expect to use the work round rather than have a patch issued.

However, does my workround expose a security weakness if logging of sql queries are enabled?

Report message to a moderator

[Message index]
 
Read Message
Read Message
Read Message
Read Message
Previous Topic: Problem extending sql_from
Next Topic: Problem in implementing FAQ 81
Goto Forum:
  

[ Syndicate this forum (XML) ] [ RSS ] [ PDF ]

Current Time: Thu Oct 23 03:07:11 EDT 2025

Total time taken to generate the page: 0.09509 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.2.0.
Copyright ©2001-2025 FUDforum Bulletin Board Software