MD5# - Problem

[Matiaser]

Hi Devbest,

When I opend my hotel I used a cms that dont was using MD5 on password. And ofcors I want to have it. I was able to fix the problem, the problem now is all the other pre registerd user get wrong password when login.

Revcms
BcStorm

Sorry for bad Engelish

 

[JayC]

Under Login:

if($this->userValidation($template->form->log_username, $core->hashed($template->form->log_password)) || $this->userValidation($template->form->log_username, $core->newHashed($template->form->log_password)))

That is testing to see if they can login with their normal HASHED or the new HASH

if($this->userValidation($template->form->log_username, $core->hashed($template->form->log_password))){
                            $password = $core->newHashed($template->form->log_password);
                            mysql_query("UPDATE users SET password = '".$password."' WHERE username = '".$template->form->username."' LIMIT 1");
                        }

If login with OLD hash ->
Update to NEW hash