#937
  • Created on
    2011-03-16 12:29
  • Reported by
    notnoop
  • Status
    Fixed
  • Priority
    Normal (3)
  • Assigned to
    Ján Raška
  • Milestone
    2.5-M1
  • Plan Level
    -
  • Due Date
    -

Attachments

Related Tickets

Add new subtask or bug

PasswordField not storing salt

Record PasswordField doesn't store and load hashed values properly. It hashes new passwords with randomly generated salt without storing the salt, and re-hashes the database value with a new salt when loading it. There is no mechanism to actually match against the original password.

A test case is provided at https://gist.github.com/872498 .
User picture
  on 2011-03-16 15:55 *
By dpp
Status changed from New to Invalid
Please do not open tickets unless a Lift committer has asked you to and also, please make sure that you link to the thread on the Lift list in opened tickets.
User picture
User picture
  on 2011-04-28 10:11 *
By notnoop
Description changed from Record PasswordField doesn'... to Record PasswordField doesn'...
User picture
  on 2011-04-28 10:13 *
By notnoop
Assigned to set to David Whittaker
Status changed from Invalid to New
User picture
  on 2011-12-01 11:43 *
By Ján Raška
Assigned to changed from David Whittaker to Ján Raška
Status changed from New to Accepted
User picture
  on 2011-12-16 06:53 *
By Ján Raška
Milestone set to 2.5-M1
User picture
  on 2012-02-10 15:33 *
By Ján Raška
Status changed from Accepted to Fixed
(In revision:8f1698a844217563b232c01d7b87db2180f7e075) fix of broken PasswordField using BCrypt-based password encryption (closes #937)

Branch: master