Changeset 3231:bf7f869cfed9 for inc/core/class.dc.core.php

Timestamp:

03/25/16 12:43:18 (9 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Allow different cryptographic algorithm for user password, choosen algo must provide result longer or equal than 40 characters (as default sha1), closes #1922

The constant DC_CRYPT_ALGO should be defined in config.php, and users will have to use recovery password procedure to set a new one according to the choosen algorithm.

File:

• inc/core/class.dc.core.php (modified) (1 diff)

inc/core/class.dc.core.php

@@ -198 +198 @@
      public function checkNonce($secret)
      {
+          // 40 alphanumeric characters min
           if (!preg_match('/^([0-9a-f]{40,})$/i',$secret)) {
                return false;