|
|
| Re: FUDforum 3.0.1RC1 released [message #162175 is a reply to message #162122] |
Mon, 29 March 2010 19:25   |
|
|
upgrade adds the 'salt' field to the user table,
but sets the salt value to 'NULL' rather than NULL
(string rather than... well the absences of anything)
this results in no one being able to log in
setting to '' or to NULL fixes it
also, the reseting passwords doesnt work. new users passwords work fine. but if an existing user (who is broken from the above) resets their password, they cannot log in. their password field is updated and salt is set to some hex values.
sorry if this isnt the right place to post this
there is no errors in the apache logs
i suspect the upgrade.php script is faulty, and that the reset password section isnt using the updated password algorithm in the same way that the login is
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Re: FUDforum 3.0.1RC1 released [message #162204 is a reply to message #162122] |
Sun, 04 April 2010 06:44 |
|
|
when a person changes their password, it works, when a person forgets their password and requests their password be reset it seems to send them the encrypted version if their password rather than the unencrypted version.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Calendar
Search
Help
Members
Control Panel
Logout [ CommonCrawl [Bot] ]
Home
]