Hi all,

We're running UBB.threads 8.0.1 on PHP 8.4. Looking at the stock code, member passwords are stored as md5() (and older DES crypt() hashes are still accepted at login).

Two questions for the developers:

1. Does the upcoming 8.1.0 release move password storage to PHP's password_hash() / password_verify()?
2. If so, will existing md5/crypt hashes be upgraded automatically when a member logs in (password_needs_rehash), so nobody is forced to reset?

If this is already on the roadmap, a rough idea of the 8.1.0 timing would help us plan. Happy to test a beta if that's useful.

Thanks!

Geoff — First Generation Firebird (firstgenfirebird.org), online since 1996
UBB.threads 8.0.1 · PHP 8.4 · MySQL 5.7