[phpesp-dev] [ phpesp-Bugs-1727902 ] No Logon when mysql > 4.1 (hash lenght problem)

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Bugs item #1727902, was opened at 2007-05-29 22:38
Message generated for change (Comment added) made by miguel2
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=1727902&group_id=8956

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
>Category: Docs / FAQ
Group: v1.8
Status: Open
>Resolution: None
Priority: 5
Private: No
Submitted By: Miguel (miguel2)
Assigned to: Nobody/Anonymous (nobody)
Summary: No Logon when mysql > 4.1 (hash lenght problem)

Initial Comment:
Today i could not login to phpESP even if i created a new user via phpmyadmin. I didnt login since a year. in the meantime the hoster upgraded to mysql 5.

I investigated a bit and found that the lenght of the password hash created by the mysql function PASSWORD() has changed from 16bit to 41bit. (http://dev.mysql.com/doc/refman/5.0/en/password-hashing.html)

You have to change the lenght of the password field in table designer to 41

 ALTER TABLE `designer` CHANGE `password` `password` CHAR( 64 ) CHARACTER SET latin1 COLLATE latin1_swedish_ci NOT NULL

----------------------------------------------------------------------

>Comment By: Miguel (miguel2)
Date: 2007-05-29 23:22

Message:
Logged In: YES 
user_id=1346327
Originator: YES

You are right. The sql statement in mysql_populate.sql is

CREATE TABLE designer (
	username	CHAR(64) NOT NULL,
	password	CHAR(64) NOT NULL,

So the lenght is ok.
Maybe you should put something in the faq like: I can't login anymore
never mind which user I try. I always get the message "[ Incorrect User ID
or Password, or your account has been disabled/expired. ]"

----------------------------------------------------------------------

Comment By: Matthew Gregg (greggmc)
Date: 2007-05-29 22:54

Message:
Logged In: YES 
user_id=14116
Originator: NO

I guess this belongs in the documentation somewhere.  Not really a bug
with ESP.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=1727902&group_id=8956