| Re: FUDforum 3.0.1RC1 released |
Wed, 07 April 2010 11:28 |
|
|
naudefj wrote on Wed, 07 April 2010 00:36After applying the patch you need to rebuild the theme.
Right again as usual naudefj! It worked 4.0 and I received a proper password on reset for both installations I had upgraded with the 1st script.... I keep forgetting rebuilding themes (got to brand that on my forehead). 
So the correct method to download and apply the fix: http://sourceforge.net/apps/trac/fudforum/changeset/4938
Is to download, Unzip it and upload only the "reset.php.t" file from (/trunk/install/forum_data/src/reset.php.t) to the non-browsable "forum_data/src/" directory replacing the previous "reset.php.t" already there.
Then rebuild all themes, and run the consistency checker! In the absence of any thing else this appears to be resolved.
|
|
| Re: FUDforum 3.0.1RC1 released |
Wed, 07 April 2010 09:22 |
|
|
Kwoteer:Im suprised the code to deal with passwords isnt centralized in a common subroutine.
So was I when I've started to change it. If you can help to get it fixed up, please let me know.
|
|
|
|
|
|
| Re: FUDforum 3.0.1RC1 released |
Tue, 06 April 2010 23:38 |
|
|
naudefj wrote on Tue, 06 April 2010 15:02Thanks for testing and reporting problems like this. It would be ugly if bugs like this make it into a final release.
Agreed! However it is rough for people like me who are confused about what/how to use the fix provided!
In my case after unzipping the file, it left me with a "trunk" directory folder and a few subfolders ( /trunk/install/forum_data/src/) with a "reset.php.t" file in the last one.
I decided that "reset.php.t" needed to be uploaded to the non-browsable "forum_data/src/" section to replace the previous "reset.php.t" already there.
That did NOT work (even after clearing cache, and running Forum Consistency checker) I'm still sent the Hash 5 encryption.
Could this be the result of my already resetting the "salt" fields to "null" or am I missing something important?
|
|
|
|
|
|
| Re: FUDforum 3.0.1RC1 released |
Sun, 04 April 2010 12:25 |
|
|
djzort wrote on Sun, 04 April 2010 05:44when a person changes their password, it works, when a person forgets their password and requests their password be reset it seems to send them the encrypted version if their password rather than the unencrypted version.
I double checked and you are correct! I had the same problem with installations upgraded with both versions of the 3.0.1RC1 upgrade.
|
|
| Re: FUDforum 3.0.1RC1 released |
Sun, 04 April 2010 06:44 |
|
|
when a person changes their password, it works, when a person forgets their password and requests their password be reset it seems to send them the encrypted version if their password rather than the unencrypted version.
|
|
|
|
|
|
|
|
|
|
| Re: FUDforum 3.0.1RC1 released |
Tue, 30 March 2010 16:06 |
|
|
djzort wrote on Mon, 29 March 2010 18:25<--snip-->this results in no one being able to log in <--snip-->
Wish I had read that 1st, tried upgrade twice with the same problem as above. With only a few users resetting the salt field to null was a simple matter but the problem was identical.
Thanks for the heads up!
|
|
| Re: FUDforum 3.0.1RC1 released |
Mon, 29 March 2010 19:25 |
|
|
upgrade adds the 'salt' field to the user table,
but sets the salt value to 'NULL' rather than NULL
(string rather than... well the absences of anything)
this results in no one being able to log in
setting to '' or to NULL fixes it
also, the reseting passwords doesnt work. new users passwords work fine. but if an existing user (who is broken from the above) resets their password, they cannot log in. their password field is updated and salt is set to some hex values.
sorry if this isnt the right place to post this
there is no errors in the apache logs
i suspect the upgrade.php script is faulty, and that the reset password section isnt using the updated password algorithm in the same way that the login is
|
|
| FUDforum 3.0.1RC1 released |
Mon, 22 March 2010 11:56 |
|
|
Hi,
The first release candidate for FUDforum 3.0.1 is now available for download and testing. Should everything run smoothly during testing, this is what will be released to our users as the official version after a beta period of +- 2 weeks. A list of new features and fixes is available on the wiki at FUDforum 3.0.1. The download URL is https://sourceforge.net/projects/fudforum/files
Enjoy!
Frank
|
|
Calendar
Search
Help
Members
Control Panel
Logout [ CommonCrawl [Bot] ]
Home