Skip to content

Conversation

@dielshin
Copy link
Contributor

It's time to do something about storing passwords in md5 🤪

dielshin and others added 4 commits May 6, 2020 20:39
Sending an API token via the GET-parameter is not always safe. Need a way to do this safely, for example, through the header.

SR: https://developers.webasyst.ru/forum/35999/ispolzovanie-api-s-bezopasnoy-peredachey-tokena/#comment116939
# Conflicts:
#	wa-system/api/waAPIController.class.php
@justbackend
Copy link

How can i download

@WinterSilence
Copy link
Contributor

WinterSilence commented Jan 22, 2022

you can define wa_password_hash() and generate password hash as you wish

if (function_exists('wa_password_hash')) {

@dielshin
Copy link
Contributor Author

dielshin commented Feb 1, 2022

and generate password hash as you wish

Read how the password_verify function works

Leonix pushed a commit that referenced this pull request Mar 18, 2022
Squashed commit of the following:

commit 9999ce9
Author: Di Elshin <[email protected]>
Date:   Thu Mar 17 17:36:57 2022 +0300

    Update waVerificationChannelSMS.class.php

commit cf44051
Author: Di Elshin <[email protected]>
Date:   Thu Mar 17 16:58:41 2022 +0300

    Update waVerificationChannelSMS.class.php

commit 1ef7b4d
Author: Di Elshin <[email protected]>
Date:   Thu Mar 17 16:57:31 2022 +0300

    Update waVerificationChannelEmail.class.php

commit 1a2d011
Author: Dmitry Elshin <[email protected]>
Date:   Tue Dec 14 14:56:21 2021 +0300

    Calling a custom function to validate the password hash (wa_password_verify)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants