From: Alexandre Alapetite Date: Sun, 15 Apr 2018 09:12:32 +0000 (+0200) Subject: Revert removal of legacy_password column X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=360e2e6342499cc2fc071cc8a8c1729ca3cd3460;p=friendica.git Revert removal of legacy_password column https://github.com/friendica/friendica/pull/4782#issuecomment-380978218 --- diff --git a/src/Model/User.php b/src/Model/User.php index d66c73d7eb..2621897f4e 100644 --- a/src/Model/User.php +++ b/src/Model/User.php @@ -128,12 +128,22 @@ class User $user = self::getAuthenticationInfo($user_info); if (strpos($user['password'], '$') === false) { + //Legacy hash that has not been replaced by a new hash yet if (self::hashPasswordLegacy($password) === $user['password']) { self::updatePassword($user['uid'], $password); + return $user['uid']; + } + } elseif (!empty($user['legacy_password'])) { + //Legacy hash that has been double-hashed and not replaced by a new hash yet + //Warning: `legacy_password` is not necessary in sync with the content of `password` + if (password_verify(self::hashPasswordLegacy($password), $user['password'])) { + self::updatePassword($user['uid'], $password); + return $user['uid']; } } elseif (password_verify($password, $user['password'])) { + //New password hash if (password_needs_rehash($user['password'], PASSWORD_DEFAULT)) { self::updatePassword($user['uid'], $password); }