Ticket #1380: ampusers-sha256.patch

File ampusers-sha256.patch, 1.3 kB (added by pvanstam, 11 months ago)
Patch file for modifying ampusers table to encrypt password with SHA256

admin/header_auth.php

old	new
22	22	// not logged in, and have provided a user/pass
23	23	$_SESSION['AMP_user'] = new ampuser($_SERVER['PHP_AUTH_USER']);
24	24
25		if (!$_SESSION['AMP_user']->checkPassword(~~$_SERVER['PHP_AUTH_PW']~~)) {
	25	if (!$_SESSION['AMP_user']->checkPassword(hash("sha256", $_SERVER['PHP_AUTH_PW']))) {
26	26	// failed, one last chance -- fallback to amportal.conf db admin user
27	27	if ( (count(getAmpAdminUsers()) == 0) && ($_SERVER['PHP_AUTH_USER'] == $amp_conf['AMPDBUSER'])
28	28	&& ($_SERVER['PHP_AUTH_PW'] == $amp_conf['AMPDBPASS'])) {