UBB.threads PHP Forum Software Community Forums General Suggestions and Feedback [6.0] Regarding passwords.

I read this in the 6.0 announcements: "New passwords will now be md5 based instead of crypt."

May I ask why the change? And will this require users to re-register or request a new password?

Xena Dragon
Webmaster UO Stratics
http://uo.stratics.com

A very fair question. Will there be a migration script? Is that even possible, given how it's one-way encrypted?

Or will it use md5 for NEW accounts (and when passwords are changed), but still read the OLD ones properly?

Either way I think this might be looked at more closely if it were on the Assistance forum.

-Steve Estes (Tyriel)
Forum Mod and Member, Guardians of Destiny, www.GofD.org
AIM: EnderW271 ICQ: 6854118
Email: destes@ix.netcom.com

Usage of md5 allows passwords over eight characters, and yes compatibility with previous system is possible (don't know if it is implemented but it is doable). In the worst case, your users will have to request a new password through the 'I forgot pass' option.

PS. The page following the 'submit post' is not themed yet <img border="0" title="" alt="[Wink]" src="images/icons/wink.gif" />

Razvan explained the reason for the change. And to add to that, it will be backwards compatible. Users with old crypted passwords will still be able to login as normal, but all new passwords will be generated using md5.

-------------------
Rick Baker
UBBThreads developer