[Lain]

I'd love to do something like this for SL... Although there's no way I'm doing this manually 8,000 times.

You could make the users do it themselves. By leaving the existing hashes there, their passwords won't work until they do a password reset.

[phyrrus9]

Or send a mass password reset and update the code. They won't even be able to log in until they use the password sent via email, then they have to update it. I wouldn't encrypt posts though, seems rather pointless. Lets do it

[Oni]

Or send a mass password reset and update the code. They won't even be able to log in until they use the password sent via email, then they have to update it. I wouldn't encrypt posts though, seems rather pointless. Lets do it

As if we need more people that can't login...

[Lain]

As if we need more people that can't login...

It'd be worth it. Alternatively you could store the old hash and the new encrypted password in the database; then run a check for logged in users to see if there's any content in the deprecated hash column and force the user to change their password if there is.

Then once it has been changed, you can NULL that column for that user.

That way, they can still login; and once their password is changed, the old (unsecure) hash is removed.

[phyrrus9]

As if we need more people that can't login...

Well, it would be a neat little thing to play with and implement at a later time. If you gave me a little sandbox to play with I could write one up. Like maybe a default mybb install with fs access to only that directory (I hate using webhosting, and I do not want to set up apache+php5 on a chromebook)

[Yani]

Regarding this discussion on changing the passwords of the current users, MySQL has an md5() function, so a query like this would be 100 times easier:

Code:

UPDATE `users` SET `password` = md5(`password` + 'salt')

[Eclipse]

Regarding this discussion on changing the passwords of the current users, MySQL has an md5() function, so a query like this would be 100 times easier:

Code:

UPDATE `users` SET `password` = md5(`password` + 'salt')

You're retarded. Did you even read anything but the title?

[Yani]

You're retarded. Did you even read anything but the title?

Yeah, and I saw a discussion about changing all the passwords to the updated one, while you can use the md5() function from MySQL to update the whole column.

I was only giving an example with the code I posted.


No need to be harsh against a new member.

[Lain]

You're retarded. Did you even read anything but the title?

No, you're retarded; What Yani said is correct, you can use a query similar to the one he posted, to update the passwords.

[Oni]

You're retarded. Did you even read anything but the title?

No, he is helpful, actually. I forgot MySQL had md5().