MantisBT - v3.4 Release (Current)
View Issue Details
0001171v3.4 Release (Current)Core Infrastructurepublic2012-08-05 16:492019-01-03 12:53
Reportercaseydk 
Assigned Tocaseydk 
PrioritynormalSeverityminorReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version 
Summary0001171: Update password mechanism
DescriptionWe've used an unsalted md5 all along. For better security, we should upgrade to something better.. not sure which algorithm, but a salt + Hash would be a good:

http://www.php.net/manual/en/book.hash.php
TagsNo tags attached.
Attached Files

Notes
(0003630)
caseydk   
2014-08-26 13:40   
Going to use this:

https://packagist.org/packages/ircmaxell/password-compat
(0003734)
caseydk   
2014-12-30 22:38   
Resolved on master instead of waiting for v4.0:

https://github.com/web2project/web2project/commit/3ecd4e039fefb69cba65aa1277451194737b6aa5
(0003914)
caseydk   
2019-01-03 12:53   
In the 31 Dec 2018 release: http://docs.web2project.net/release-notes/3.4.html

Issue History
2012-08-05 16:49caseydkNew Issue
2014-04-07 23:29caseydkProjectPending Requests => v3.2 Release
2014-04-07 23:29caseydkStatusnew => resolved
2014-04-07 23:29caseydkResolutionopen => fixed
2014-04-07 23:29caseydkAssigned To => caseydk
2014-04-13 18:51caseydkTarget Version => 3.2
2014-05-09 00:27caseydkCategoryGeneral => Core Infrastructure
2014-05-09 00:27caseydkDescription Updatedbug_revision_view_page.php?rev_id=38#r38
2014-05-09 00:27caseydkStatusresolved => confirmed
2014-05-09 00:28caseydkProjectv3.2 Release => v4.0 Release (Planning)
2014-06-10 22:49caseydkTarget Version3.2 => 4.0
2014-08-26 13:40caseydkNote Added: 0003630
2014-12-30 22:38caseydkNote Added: 0003734
2014-12-30 22:38caseydkProjectv4.0 Release (Planning) => v3.3 Release
2014-12-30 22:38caseydkStatusconfirmed => resolved
2014-12-30 22:38caseydkFixed in Version => 3.3
2016-12-26 23:37caseydkProjectv3.3 Release => v3.4 Release (Current)
2019-01-03 12:53caseydkNote Added: 0003914
2019-01-03 12:53caseydkStatusresolved => closed