Skip to content
This repository was archived by the owner on Jan 29, 2020. It is now read-only.

Conversation

Xerkus
Copy link
Member

@Xerkus Xerkus commented May 6, 2019

Fixes #13

  • Is this related to documentation?
    Old documentation for CredentialTreatmentAdapter provides md5() in its usage example which might prompt users to utilize insecure practices. This PR removes md5() usage from the documentation and adds further guidance towards CallbackCheckAdapter and PHP functions password_hash() and password_verify()

@Xerkus
Copy link
Member Author

Xerkus commented May 6, 2019

@tdutrion I cherry picked your commit fixing md5 usage in the docs. Thanks.

Copy link
Member

@weierophinney weierophinney left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great idea! I've added a few recommendations for changes, but otherwise, it looks good.

@Xerkus Xerkus merged commit 9c49a5e into zendframework:master May 6, 2019
Xerkus added a commit that referenced this pull request May 6, 2019
Xerkus added a commit that referenced this pull request May 6, 2019
@Xerkus Xerkus added this to the 2.6.1 milestone May 6, 2019
@Xerkus Xerkus modified the milestones: 2.6.1, 2.7.0 May 14, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Remove insecure MD5 from documentation
3 participants