#30 password field in user table too short

[Patrick Näf]

The password field in the MySQL user table is currently
defined as varchar(16).

This is too short, because on some platforms the MySQL
function password() may return a value that is longer
than 16 characters.

A colleague of mine was not able to install
Timesheet.php on his Windows box because of this
problem. Eventually he fixed it by making the field
longer. If you're interested, I can ask him which
Windows/MySQL versions he had the problem with.

I suggest making the password field a varchar(32), or
even varchar(64). The fix would be in file
timesheet.sql.in.

[Nicolas Dufresne]

Logged In: YES
user_id=400639

I totally agree. I'll fix this today.

[Nicolas Dufresne]

Logged In: YES
user_id=400639

MD5 uses 16 char, SSHA 20. 64 would be overkill with
current hash methode. I'll use 32...

If you have any comment about this, tell me!

[Patrick Näf]

Logged In: YES
user_id=427560

32 chars is just fine, thanks!

[Dominic Gamble]

Logged In: YES
user_id=377918

I've changed it to 41 to allow MySQL's SHA1 function to
work, amongst others. I've also updated the install scripts
to allow a user to choose which function to use for password
authentication:
SHA1
PASSWORD
OLD_PASSWORD

[Nobody/Anonymous]

Logged In: NO

I have to change it to 41 too.

I'm using windoze server 2003, IIS, Mysql 4.1, PHP 5.0.4 with
ISAPI

Seem now working fine