We build. You grow.

Get best community software here

Start a social network, a fan-site, an education project with oxwall - free opensource community software

Oxwall passwords | Forum

Ronnel DC
Ronnel DC Jan 23 '13
Hello oxwall,

Oxwall password is hashed to SHA256 right?

Can i change it to MD5?
Alia Team
Alia Jan 23 '13
Ronnel, you are right, we use SHA256.
Why would you want to change this to MD5? SHA256 is more secure.
Ronnel DC
Ronnel DC Jan 23 '13
So i can restore easily some passwords, because on my site majority of my users have fake email so they can't reset their password.
Alia Team
Alia Jan 24 '13
Ronnel, if you would like to manually restore passwords you don't need to change the hashing to MD5.
All you need to do is to:

1. Register a new special user. And remember his password. For example username is "james" and passwords you used is "jamespassword".

2. On your server find the ow_base_user table >>find username "james">> copy his hashed password

3. Paste this code into the "password" field of other user/users.

4. Since you as a creator of "james" username, you  know that password is "jamespassword". Send this password to needed users.



Ronnel DC
Ronnel DC Jan 24 '13
yeah i know that method, but i want to change to md5?
Ronnel DC
Ronnel DC Mar 2 '13
any help?
Ronnel DC
Ronnel DC Mar 2 '13
Anyone?
Purusothaman Ramanujam
Why would you want to change from strong SHA256 to weak md5? You will a keyword dictionary or a tool to decript.. saying that, md5 is weak.

http://stackoverflow.com/...o-decrypt-md5-hashes
Ronnel DC
Ronnel DC Mar 3 '13
actually im running on my localhost server, im planning to make a plugin for oxwall :)

so i need help.
Pete
Pete Mar 3 '13

To change members passwords get this .

 

http://www.oxwall.org/store/item/502

 

 

 

Ronnel DC
Ronnel DC Mar 3 '13
no. i just going to experiment on oxwall to make a new plugin.

im learning oxwall's core.

so please can anyone help?
Pete
Pete Mar 3 '13
If you or making a new plugin then why ask how to change members passwords
Purusothaman Ramanujam

Quote from Ronnel Dela Cruz im learning oxwall's core.
My Personal suggestion: This is not the starting point of learning plugin development.

Quote from Pete If you or making a new plugin then why ask how to change members passwords


Ronnel DC
Ronnel DC Mar 3 '13
Im not going to change members password itself.
im just going to change the encryption.
Alia Team
Alia Mar 4 '13
Ronnel, unfortunately there is nothing I can help you with, since this is custom code modification.
Try posting a topic in 'Custom Code Modification'  section of our forum. Make sure that your topic doesn't sound like "How can I change password hashing". Do some research, make your best guess, be as specific as you can. Read this topic before posting: http://www.oxwall.org/forum/topic/6082
kaushik
kaushik Mar 8 '13
In ow_system_plugins/base/bol/user_service.php change 

find this near by  Line No:-782

replace this
return hash('sha256', OW_PASSWORD_SALT . $password);

new line:-

return hash('md5', $password);


Try this 

Purusothaman Ramanujam

Quote from kaushik In ow_system_plugins/base/bol/user_service.php change 

find this near by  Line No:-782

replace this
return hash('sha256', OW_PASSWORD_SALT . $password);

new line:-

return hash('md5', $password);


Try this 


All your existing users will not be able to login. So you decide.
Alia Team
Alia Mar 11 '13
Topic was moved from General Questions.