• Registered: 2006-05-11
  • Posts: 8

Topic: Password hash seems to have changed

Hello.

I'm using Punbb and have about 300 users using the forum. All my website is actually based on punbb authentification.

Everything works fine except for a very small number of users.

They have created an account and have logged in at least once.

But ! When they try to login again, it seems that the password hash doesn't correspond to the password they have used (I've saved a clear version of the password as a separate new field). If I try to rehash their password with punbb's algorithm, I get a completely different hash string. If I change the password hash with the newly created hash string, they can login again.

I have no idea why and on which condition this is happening.

Any idea ?

  • Smartys
  • Former PunBB Developer
  • Offline
  • Registered: 2004-04-30
  • Posts: 7,844

Re: Password hash seems to have changed

Moved to Troubleshooting

Is the length of the hashes different?

  • Registered: 2006-06-29
  • Posts: 324

Re: Password hash seems to have changed

my money is on yes.

  • Smartys
  • Former PunBB Developer
  • Offline
  • Registered: 2004-04-30
  • Posts: 7,844

Re: Password hash seems to have changed

If it is then code in login.php should handle it properly tongue