[TYPO3-english] Using saltedpassword/sr_feuser_register correctly

Jigal van Hemert jigal at xs4all.nl
Thu Sep 1 15:46:26 CEST 2011


Hi,

On 1-9-2011 14:27, Oliver Salzburg wrote:
> Now when I change my password in the frontend, it will be stored in
> plain-text again.
>
> What am I missing?

I don't think you are missing anything. I think that sr_feuser_register 
is missing support for saltedpasswords.

In tx_felogin_pi1::changePassword() you can see that a hook is used to 
change the password into a salted hash before storing it. 
sr_feuser_register could use the same hook.

After you changed your password it will be changed to a salted hash upon 
your next login.

-- 
Kind regards / met vriendelijke groet,

Jigal van Hemert.


More information about the TYPO3-english mailing list