From 30a8ac91873f09de8636aa37b8281c7847d2e23f Mon Sep 17 00:00:00 2001 From: Petr Skoda Date: Tue, 17 Nov 2009 16:30:08 +0000 Subject: [PATCH] MDL-18006 MDL-18807 MDL-20853 suggest some longer and better salt --- config-dist.php | 2 +- lang/en_utf8/report_security.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/config-dist.php b/config-dist.php index 5714ffbe9a543..71dbc3c5c19cd 100644 --- a/config-dist.php +++ b/config-dist.php @@ -66,7 +66,7 @@ // automatically in installer, you have to uncomment and modify value // on the next line if you are creating config.php manually. // -// $CFG->passwordsaltmain = 'type_something_random_long_and_unique_here_!/.,#$~^@{}*&'; +// $CFG->passwordsaltmain = 'a_very_long_random_string_of_characters#@6&*1'; // // After changing the main salt you have to copy old value into one // of the following settings - this allows migration to the new salt diff --git a/lang/en_utf8/report_security.php b/lang/en_utf8/report_security.php index aa72f71bdc7db..ce0887b88c205 100644 --- a/lang/en_utf8/report_security.php +++ b/lang/en_utf8/report_security.php @@ -123,7 +123,7 @@ $string['check_passwordsaltmain_warning'] = 'No password salt has been set'; $string['check_passwordsaltmain_ok'] = 'Password salt is OK'; $string['check_passwordsaltmain_weak'] = 'Password salt is weak'; -$string['check_passwordsaltmain_details'] = '

It is strongly recommended that a password salt is set as it greatly reduces the risk of password theft.
To set a password salt add the following to your config.php file.

\$CFG->passwordsaltmain = \'arandomstringofcharacters\';

The random string of characters should be a mix of letters, numbers and other characters.

'; +$string['check_passwordsaltmain_details'] = '

It is strongly recommended that a password salt is set as it greatly reduces the risk of password theft.
To set a password salt add the following to your config.php file.

\$CFG->passwordsaltmain = \'a_very_long_random_string_of_characters#@6&*1\';

The random string of characters should be a mix of letters, numbers and other characters.

'; $string['check_riskadmin_detailsok'] = '

Please verify the following list of system administrators:

$a'; $string['check_riskadmin_detailswarning'] = '

Please verify the following list of system administrators:

$a->admins