bbPress

Simple, fast, elegant

bbPress Plugin Browser »

MD5 insecurity for bbPress (1.2)

Download

Version: 1.2

Other Versions

Last Updated: 2008-4-4

Requires bbPress Version: 0.9.0.1 or higher

Compatible up to: 0.9.0.1

Plugin Homepage »

Average Rating

5 stars
4 stars
3 stars
2 stars
1 star
(0)

Your Rating

Author: Sam Bauers

This plugin reverts storage of user passwords back to using MD5 hashing instead of the newer phpass hashing introduced in build 974.

It is useful for people who need to maintain MD5 as the hashing type due to sharing of the bbPress user tables with other applications which require it.

If some of your passwords are already converted to phpass, do not fear. The next time those users log in to bbPress their passwords will be converted back to MD5.


  1. Don't use this on bbPress 0.8.3 or less! Currently only useful if you run trunk.

    Posted: 1 year ago #
  2. retrospec

    Member

    Hello,
    Does this give the option to switch back out to phppass once passwords are converted.

    I'm in the middle of converting my old forum (which uses md5) to bbPress. I didn't realise 0.8.3 was not md5, so I need to import the data then move the users to phppass, which I assume is more secure than md5

    Thanks.

    Posted: 1 year ago #
  3. If you want to use phppass, you don't need any plugin. Core bbPress will automatically upgrade any md5 password to a phppass password the first time that user logs in.

    You can import your md5 passwords to bbPress and it will just work.

    This plugin is only really useful if your passwords are used by multiple pieces of software.

    Posted: 1 year ago #
  4. You can use this plugin for a while if you need to and then turn it off and users should not notice any difference. You will probably end up with a mixture of md5 and phpass hashes, but the conversion is automatic when users login.

    Posted: 1 year ago #
  5. This plugin is now usable in bbPress 0.9+

    Posted: 1 year ago #

RSS feed for this topic

Add a Comment

You must log in to post.

Code is Poetry.