1

Topic: Quit password hashing

I will run a punBB forum in a school site where only student will can login (with a password provided by us)... the cuestion is: Can i configure punBB to use not hashed passwords? (i want to insert the password directly by the MySQl administrator)

PD: pardon my english.

Re: Quit password hashing

You can, but I recommend that you use some online MD5 or SHA1 generator and then just insert the hash instead.

Here's one: http://pajhome.org.uk/crypt/md5/

"Programming is like sex: one mistake and you have to support it for the rest of your life."

3

Re: Quit password hashing

ok, thanks..
the issue here is that i already have a Mysql table with students information (including passwords) and i'm planning to make a PHP scripts to introduce this information in the punBB users table. So... how can i transform the actual passwords into MD5 or SHA1 passwords? there's a PHP function for that?

Re: Quit password hashing

Yes, just run md5() or sha1() on them. If you're using PHP 4.3.0 or later, you should go with sha1().

"Programming is like sex: one mistake and you have to support it for the rest of your life."

5

Re: Quit password hashing

excelent... thanks a lot

Re: Quit password hashing

if you interest to check MD5 hash please look at it >; )

h*t**p://www.hashchecker.com

Re: Quit password hashing

you can md5/sha1 directly in MySQL as well

update tablename set password = md5(password)
or
update tablename set password = sha1(password)