Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

auth hash my411 #1825

Closed
zenondoh opened this issue Feb 8, 2017 · 0 comments
Closed

auth hash my411 #1825

zenondoh opened this issue Feb 8, 2017 · 0 comments

Comments

@zenondoh
Copy link

zenondoh commented Feb 8, 2017

Hi,

The string returned by the function hash_my41, inc/PassHash.class.php:315 is a lower case string, but the returned string from the function PASSWORD of the mysql engine is upper case.

We are using the hash my411 for storing the password.
When we try to authenticate with a user who the password was changed by a sql query using the mysql password function, the authentication failed because the condition in inc/PassHash.class.php:94 return false.

DokuWiki version: 2016-06-26a "Elenor of Tsort"
Operating system of the server: Ubuntu 14.04.5 LTS
Operating system of client: all
The used web server: Apache/2.4.7
The used PHP version: PHP 5.5.9
The used browsers (try multiple): all
Plugins, auth backends: authmysql.

Exact steps to reproduce the problem:

  1. change the default auth hash to my411.
  2. create a user with the admin web page and try to login.
  3. change the password of the same user with a sql query with the mysql function PASSWORD like: pass=PASSWORD('foo').
  4. try to login with the password foo, the authentication failed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant