[TYPO3-core] RFC: Feature Request #7139: Integration of fe_users password encryption

Steffen Kamper steffen at sk-typo3.de
Mon Jan 14 11:03:00 CET 2008


I did a new patch that applies the changes only in tslib_feuserauth (as it 
is the right one for FE)

To ensure no conflicts with mode "challenge" and "superchallenge" i hooked 
the function processLoginData and converted only if flag is set and security 
level is normal.

tested and works.

vg  Steffen 


begin 666 20080113_feuser_password_encryption2.diff
M26YD97 at Z('0S;&EB+V-O;F9I9U]D969A=6QT+G!H< T*/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/0T*+2TM('0S;&EB+V-O;F9I9U]D969A=6QT+G!H< DH<F5V
M:7-I;VX@,C at X,BD-"BLK*R!T,VQI8B]C;VYF:6=?9&5F875L="YP:' )*'=O
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M:6]N(&5X:7-T<R(*( D))V5)1%]I;F-L=61E)R ]/B!A<G)A>2 at I+ D)"0DO
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M("A5<V5F=6P at 9F]R(&9U;F-T:6]N86QI='D@=&AA="!R97%U:7)E<R!A(&QO
M=R!I;FET:6%L:7IA=&EO;B!F;V]T<')I;G0L(&5G+B!F<F]N=&5N9"!A:F%X
M(&%P<&QI8V%T:6]N<RD*( D))UA#3$%34R<@/3X at 07)R87DH*2P)"0D)"2\O
M(%-E92 G26YS:61E(%194$\S)R!D;V-U;65N="!F;W(@;6]R92!I;F9O<FUA
M=&EO;BX*+0D))W!A9V5#86-H951O17AT97)N86Q&:6QE<R<@/3X at 1D%,4T4)
M"2\O($EF('-E="P@<&%G92!C86-H92!E;G1R:65S('=I;&P at 8F4@<W1O<F5D
M(&EN('1Y<&\S=&5M<"]C86-H95]P86=E<R]A8B\@:6YS=&5A9"!O9B!T:&4@
M9&%T86)A<V4N(%-T:6QL+" B8V%C:&5?<&%G97,B('=I;&P at 8F4@9FEL;&5D
M(&EN(&1A=&%B87-E(&)U="!T:&4@(DA434PB(&9I96QD('=I;&P at 8F4@96UP
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M8F%S92X at 4W1I;&PL(")C86-H95]P86=E<R(@=VEL;"!B92!F:6QL960@:6X@
M9&%T86)A<V4 at 8G5T('1H92 B2%1-3"(@9FEE;&0@=VEL;"!B92!E;7!T>2X@
M5VAE;B!T:&4 at 8V%C:&4@:7, at 9FQU<VAE9"!T:&4 at 9FEL97,@:6X at 8V%C:&5?
M<&%G97,O86(O('=I;&P@;F]T(&)E(&9L=7-H("T@>6]U('=I;&P@:&%V92!T
M;R!G87)B86=E(&-L96%N(&UA;G5A;&QY(&]N8V4@:6X at 82!W:&EL92X**PD)
M)W!A<W-W;W)D5'EP92<@/3X@)W!L86EN)PD)"0DO+R!3=')I;F<@9F]R(%!A
M<W-W;W)D(&5N8W)Y<'1I;VXN(%!O<W-I8FQE('9A;'5E<R!A<F4@<&QA:6X@
M*&YO(&5N8W)Y<'1I;VXI(&%N9"!M9#4*( DI+ H@"2=-3T13)R ]/B!!<G)A
M>2@)"2\O($)A8VME;F0 at 36]D=6QE($-O;F9I9W5R871I;VX@*&]B<V]L971E
M+"!M86ME(&5X=&5N<VEO;B!I;G-T96%D*0H@"2DL"DEN9&5X.B!T>7!O,R]S
M>7-E>'0O8VUS+W1B;%]C;7,N<&AP#0H]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M#0HM+2T@='EP;S,O<WES97AT+V-M<R]T8FQ?8VUS+G!H< DH<F5V:7-I;VX@
M,C at X,BD-"BLK*R!T>7!O,R]S>7-E>'0O8VUS+W1B;%]C;7,N<&AP"2AW;W)K
M:6YG(&-O<'DI#0I 0" M,C<X+#D@*S(W."PQ,B! 0 T*("D["B *( HK"2\O
M(&-H96-K(&9O<B!P87-S=V]R9"!E;F-R>7!T:6]N"BMI9B at D1TQ/0D%,4ULG
M5%E03S-?0T].1E]605)3)UU;)T9%)UU;)W!A<W-W;W)D5'EP92==/3TG;60U
M)RD@>PHK"2140T%;)V9E7W5S97)S)UU;)V-O;'5M;G,G75LG<&%S<W=O<F0G
M75LG8V]N9FEG)UU;)V5V86PG72 ]("=R97%U:7)E9"QM9#4L<&%S<W=O<F0G
M.PHK?0H@"B *+0H at +R\@*BHJ*BHJ*BHJ*BHJ*BHJ*BHJ*BHJ*BHJ*BHJ*BHJ
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M97)A=71H+G!H< DH<F5V:7-I;VX@,C at X,BD-"BLK*R!T>7!O,R]S>7-E>'0O
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M=7)I='E?;&5V96P**PD)("H**PD)("H at 0'!A<F%M"6%R<F%Y"0EL;V=I;B!D
M871A(&%R<F%Y"BL)"2 J($!P87)A;0ES=')I;F<)"4%L=&5R;F%T:79E('-E
M8W5R:71Y7VQE=F5L+B!5<V5D('=H96X at 875T:&5N=&EC871I;VX@<V5R=FEC
M97,@=V%N=',@=&\@;W9E<G)I9&4@=&AE(&1E9F%U;'0N"BL)"2 J($!R971U
M<FX)87)R87D)"7!R;V-E<W-E9"!L;V=I;B!D871A(&%R<F%Y"BL)"2 J($!I
M;G1E<FYA; HK"0D@*B\**PD)9G5N8W1I;VX@<')O8V5S<TQO9VEN1&%T82 at D
M;&]G:6Y$871A+" D<V5C=7)I='E?;&5V96P])R<I('L**PD)"6=L;V)A;" D
M5%E03S-?0T].1E]605)3.PHK"BL)"0DD;&]G:6Y396-U<FET>4QE=F5L(#T@
M)'-E8W5R:71Y7VQE=F5L(#\@)'-E8W5R:71Y7VQE=F5L(#H@*"1465!/,U]#
M3TY&7U9!4E-;)'1H:7,M/FQO9VEN5'EP95U;)VQO9VEN4V5C=7)I='E,979E
M;"==(#\@)%194$\S7T-/3D9?5D%24ULD=&AI<RT^;&]G:6Y4>7!E75LG;&]G
M:6Y396-U<FET>4QE=F5L)UT at .B D=&AI<RT^<V5C=7)I='E?;&5V96PI.PHK
M"BL)"0D)+R\@4')O8V5S<VEN9R!D871A(&%C8V]R9&EN9R!T;R!T:&4@<W1A
M=&4@:70@=V%S('-U8FUI='1E9"!I;BX**PD)"0DO+R H)&QO9VEN4V5C=7)I
M='E,979E;"!S:&]U;&0@<F5F;&5C="!T:&4@<V5C=7)I='D@;&5V96P@=7-E
M9"!O;B!T:&4 at 9&%T82!B96EN9R!S=6)M:71T960@:6X@=&AE(&QO9VEN(&9O
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M-2 at D;&]G:6Y$871A6R=U;F%M92==+B<Z)RXH;60U*"1L;V=I;D1A=&%;)W5I
M9&5N="==*2DN)SHG+B1L;V=I;D1A=&%;)V-H86QV86QU92==*3L**PD)"0D)
M+R\@8VAE8VL at 9F]R(&UD-2UE;F-R>7!T:6]N(&]F('!A<W-W;W)D"BL)"0D)
M:68@*"1465!/,U]#3TY&7U9!4E-;)T9%)UU;)W!A<W-W;W)D5'EP92==(#T]
M("=M9#4G*2!["BL)"0D)"21L;V=I;D1A=&%;)W5I9&5N="==(#T@*'-T<FEN
M9REM9#4H)&QO9VEN1&%T85LG=6ED96YT)UTI.PHK"0D)"7T**PD)"0DD;&]G
M:6Y$871A6R=U:61E;G1?=&5X="==(#T@)&QO9VEN1&%T85LG=6ED96YT)UT[
M"BL**PD)"7T at 96QS96EF("@D;&]G:6Y396-U<FET>4QE=F5L/3TG8VAA;&QE
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M"7T**PHK"0D)"2\O(%1H92!P87-S=V]R9" B=6ED96YT(B!I<R!S970 at 8F%S
M960@;VX@=&AE(&EN=&5R;F%L('-E8W5R:71Y('-E='1I;F<@;V8 at 5%E03S,*
M*PD)"0DO+R!%>&%M<&QE. at HK"0D)"2\O("1T:&ES+3YS96-U<FET>5]L979E
M;"!F;W(@=&AE(&)A8VME;F0@;75S="!B92 B<W5P97)C:&%L;&5N9V5D(B!B
M96-A=7-E('!A<W-W;W)D<R!A<F4@<W1O<F5D(&%S(&UD-2UH87-H97,@:6X@
M=&AE(&)E7W5S97)S('1A8FQE"BL)"0D)+R\@)'1H:7,M/G-E8W5R:71Y7VQE
M=F5L(&9O<B!T:&4 at 9G)O;G1E;F0@;75S="!B92 B;F]R;6%L(B!O<B B8VAA
M;&QE;F=E9"(@8F5C875S92!P87-S=V]R9', at 87)E('-T;W)E9"!A<R!C;&5A
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M*PDO*BH*( D@*B!7:6QL('-E;&5C="!A;&P at 9F5?9W)O=7!S(')E8V]R9',@
M=&AA="!T:&4 at 8W5R<F5N="!F95]U<V5R(&ES(&UE;6)E<B!O9B M(&%N9"!W
M:&EC:"!G<F]U<', at 87)E(&%L<V\@86QL;W=E9"!I;B!T:&4 at 8W5R<F5N="!D
M;VUA:6XN"B )("H at 270@86QS;R!A8V-U;75L871E<R!T:&4 at 5%-C;VYF:6<@
M9F]R('1H92!F95]U<V5R+V9E7V=R;W5P<R!I;B M/E139&%T84%R<F%Y"B )
#("H*
`
end



More information about the TYPO3-team-core mailing list