Changeset 33 for trunk/dotnode-dotpage.php

Timestamp:

09/03/05 22:42:52 (7 years ago)

Author:

alexx

Message:

• Auth: Remove MySQL PASSWORD hashing method to hash password, replace by MD5 hashing, add code to make a smooth transition between hashing method
• XML engine: Fix a trivial recent bug in dotnode-xml.php
• Robots: fix a bug in crontab script robots/launch_robots.sh (add cd dirname $0)
• CSS: Add max_width to image in blog (work on Mozilla/*, Opera but not good on Safari (no proportional resizing), of course, that doesn't work on IE)
• DB: changing DB structure !!!

  ALTER TABLE `user` ADD `passwd_md5` CHAR( 32 ) NOT NULL AFTER `passwd` ;
  ALTER TABLE `user` CHANGE `passwd` `passwd` VARCHAR( 42 ) NULL ;
  ALTER TABLE `dntp_translator` ADD `passwd_md5` CHAR( 32 ) NOT NULL AFTER `passwd` ;
  ALTER TABLE `dntp_translator` CHANGE `passwd` `passwd` VARCHAR( 42 ) NULL ;
  

Files:

• trunk/dotnode-dotpage.php (modified) (1 diff)

trunk/dotnode-dotpage.php

@@ -75 +75 @@
                 if (!isset($_SERVER['PHP_AUTH_USER']) ||
                     $_SERVER['PHP_AUTH_USER'] != $user['info']['login'] ||
-                    !$db->getRow('SELECT login, status FROM user WHERE login=? AND passwd=PASSWORD(?)',array($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']) )
+                    !$db->getRow('SELECT login, status FROM user WHERE login=? AND passwd_md5=?',array($_SERVER['PHP_AUTH_USER'], md5($_SERVER['PHP_AUTH_PW'])) )
                 )
                 {