manuelcillero/suitedesk
manuelcillero/suitedesk
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
This repository has been archived on 2025-06-21. You can view files and clone it, but you cannot make any changes to it's state, such as pushing and creating new issues, pull requests or comments.
suitedesk/modules/phpass
History
Manuel Cillero c78267142a Removed duplicated licenses and not needed changelog files
2017-08-14 23:19:19 +02:00
..
INSTALL.txt New module 'Secure Password Hashes' with core patch applied 2017-07-26 09:50:57 +02:00
password-hash.sh New version 6.x-2.2 of Secure Password Hashes module 2017-08-05 12:30:15 +02:00
password.inc New module 'Secure Password Hashes' with core patch applied 2017-07-26 09:50:57 +02:00
phpass.info New version 6.x-2.2 of Secure Password Hashes module 2017-08-05 12:30:15 +02:00
phpass.install New module 'Secure Password Hashes' with core patch applied 2017-07-26 09:50:57 +02:00
phpass.module New version 6.x-2.2 of Secure Password Hashes module 2017-08-05 12:30:15 +02:00
README.txt New module 'Secure Password Hashes' with core patch applied 2017-07-26 09:50:57 +02:00
user_load.D6.patch New module 'Secure Password Hashes' with core patch applied 2017-07-26 09:50:57 +02:00

README.txt 

This module implements secure password hashes using backported code from
Drupal 7, which is the outcome of http://drupal.org/node/29706.

This module requires PHP 5.2.4 as a minimum version (the same as Drupal 7).

IMPORTANT - this module cannot be disabled except via SQL or upgrading to
Drupal 7. Disabling will mean all users will have to login via password-reset
links.

Upgrading to Drupal 7 should be seamless as long as the core version is
>= 7.9.  That is the first release that includes the fix at
http://drupal.org/node/1205138.  The hashes stored in the {users} table
by this module are fully compatible with the Drupal 7 password system.

The default Drupal 6 and before password hashes are insecure. MD5 has 
long been known to be crackable, and we should not be storing passwords
using this.

There has been a long discussion about this. See http://drupal.org/node/29706
and http://drupal.org/node/1201444 for in-depth discussions. Do not post
issues about anything already discussed there.