Menu

#23 mysql db authentication error

closed-accepted
None
5
2007-09-14
2007-02-22
Anonymous
No

The is_login_ok function in function_global.inc.php does not send the db_is_login_ok the hashed version of the password. It gives the user an error. instead of fixing this I just went into the mysql DB and put the password as plain text now it works. (might wanna just try a simple md5 check)

Discussion

  • Nobody/Anonymous

    Logged In: NO

    I had the same problem.
    I modified the line in "is_login_ok" function in "function_global.inc.php" from
    } elseif ($user_row=db_is_login_ok($login,$pass)) {
    to
    } elseif ($user_row=db_is_login_ok($login,encrypt_password($pass))) {

    In addition I modified the structure of the field "pass" in the table "phpg_users" from "char(32)" to "char(50)"
    This way you'll not have the plain password in your DB..

     
  • JiM / aEGIS

    JiM / aEGIS - 2007-09-14

    Logged In: YES
    user_id=879481
    Originator: NO

    See dev site for follow-up on this -> https://trac.phpgraphy.org/trac/changeset/416

     
  • JiM / aEGIS

    JiM / aEGIS - 2007-09-14
    • assigned_to: nobody --> jimpower
    • status: open --> closed-accepted
     

Log in to post a comment.