[dev] crypt-md5 and passwd Driver.php

Vilius Sumskas vilius at lnk.lt
Tue Feb 10 07:00:53 PST 2004


Hi,

it's seems that i can't change passwords in mysql (using crypt-md5 algoritm).
After some research i found that comparePasswords function incorrectly
compares passwords. By default it compares plaintext against encrypted.

    function comparePasswords($encrypted, $plaintext)
    {
        return ($plaintext == Auth::getCryptedPassword($plaintext, .....
            PEAR::raiseError(_("Incorrect Password"));
    }


setting it to $encrypted == Auth::getCryptedPassword($plaintext.... solves the
problem, but this is bad solution i think. Looking forward for the patch.

--
  Best Regards,

  Vilius Sumskas
  LNK TV system administrator
  Mob. +370-614-75713
  http://www.lnk.lt





More information about the dev mailing list