Password Encryption / Hashing
Brought to you by:
canajun2eh,
yalnifj
This is an attempt to make phpGedView easier to
integrate with a CMS.
Would it be possible for the admin to specify how the
password is stored? I suggest plaintext, crypt, or
md5. Of course other algorithms could be added.
Currently the login API passes in the password in
plaintext, so it shouldn't matter. However, your
documentation dictates that the password (as returned
by getUser) be hashed with crypt. Could we not just
add a key/value pair to specify the algorithm (and
another one to indicate the salt or key if it is needed
for that algorithm)?
Logged In: YES
user_id=1278885
Related to this, could $newuser['password'] passed to
addUser be in plain text so that other CMS could do their
own hashing / encryption?