From: <wel...@us...> - 2011-10-29 19:30:59
|
Revision: 7693 http://planeshift.svn.sourceforge.net/planeshift/?rev=7693&view=rev Author: weltall2 Date: 2011-10-29 19:30:53 +0000 (Sat, 29 Oct 2011) Log Message: ----------- added saving of password in sha256 when creating new accounts/recovering password Modified Paths: -------------- www/register/processverifyaccount.php Modified: www/register/processverifyaccount.php =================================================================== --- www/register/processverifyaccount.php 2011-10-29 19:27:01 UTC (rev 7692) +++ www/register/processverifyaccount.php 2011-10-29 19:30:53 UTC (rev 7693) @@ -78,6 +78,7 @@ $newverify = mysql_real_escape_string(randString()); // this sets the password, and commits the above generated new verification string to the DB $query = "Update accounts set password = md5('" . mysql_real_escape_string($_POST['password1']) . "') " . + ",password256 = '". hash("sha256", $_POST['password1']). "'". ",status = 'A', verificationid = '$newverify' " . "where username = '" . mysql_real_escape_string(strtolower($_POST['email'])) . "' " . "and verificationid = '" . mysql_real_escape_string($_POST['verificationid']) . "' " . This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |