[phpesp-dev] [ phpesp-Bugs-1727902 ] No Logon when mysql > 4.1 (hash lenght problem)

[SourceForge.net <no...@so...>]

Bugs item #1727902, was opened at 2007-05-29 16:38
Message generated for change (Settings changed) made by bishopb
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=1727902&group_id=8956

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Docs / FAQ
Group: v1.8
Status: Closed
Resolution: Accepted
Priority: 5
Private: No
Submitted By: Miguel (miguel2)
Assigned to: Nobody/Anonymous (nobody)
Summary: No Logon when mysql > 4.1 (hash lenght problem)

Initial Comment:
Today i could not login to phpESP even if i created a new user via phpmyadmin. I didnt login since a year. in the meantime the hoster upgraded to mysql 5.

I investigated a bit and found that the lenght of the password hash created by the mysql function PASSWORD() has changed from 16bit to 41bit. (http://dev.mysql.com/doc/refman/5.0/en/password-hashing.html)

You have to change the lenght of the password field in table designer to 41

 ALTER TABLE `designer` CHANGE `password` `password` CHAR( 64 ) CHARACTER SET latin1 COLLATE latin1_swedish_ci NOT NULL

----------------------------------------------------------------------

Comment By: Franky Van Liedekerke (liedekef)
Date: 2009-05-08 03:46

Message:
Please don't do anonymous comments to a closed bug. Just upgrade to the
latest version and this is fixed.

----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2009-05-07 23:50

Message:
then how to solve it?

----------------------------------------------------------------------

Comment By: Franky Van Liedekerke (liedekef)
Date: 2007-11-27 06:44

Message:
Logged In: YES 
user_id=109671
Originator: NO

Hi,

I do consider this a phpesp issue as well, so I added these statements
again to the next upgrade sql script, so everybody has the changes needed.

Franky

----------------------------------------------------------------------

Comment By: Miguel (miguel2)
Date: 2007-05-29 17:22

Message:
Logged In: YES 
user_id=1346327
Originator: YES

You are right. The sql statement in mysql_populate.sql is

CREATE TABLE designer (
	username	CHAR(64) NOT NULL,
	password	CHAR(64) NOT NULL,

So the lenght is ok.
Maybe you should put something in the faq like: I can't login anymore
never mind which user I try. I always get the message "[ Incorrect User ID
or Password, or your account has been disabled/expired. ]"


----------------------------------------------------------------------

Comment By: Matthew Gregg (greggmc)
Date: 2007-05-29 16:54

Message:
Logged In: YES 
user_id=14116
Originator: NO

I guess this belongs in the documentation somewhere.  Not really a bug
with ESP.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=1727902&group_id=8956