Skip to content

Conversation

@elshin-io
Copy link
Contributor

It's time to do something about storing passwords in md5 🤪

elshin-io and others added 4 commits May 6, 2020 20:39
Sending an API token via the GET-parameter is not always safe. Need a way to do this safely, for example, through the header.

SR: https://developers.webasyst.ru/forum/35999/ispolzovanie-api-s-bezopasnoy-peredachey-tokena/#comment116939
# Conflicts:
#	wa-system/api/waAPIController.class.php
@justbackend
Copy link

How can i download

@WinterSilence
Copy link
Contributor

WinterSilence commented Jan 22, 2022

you can define wa_password_hash() and generate password hash as you wish

if (function_exists('wa_password_hash')) {

@elshin-io
Copy link
Contributor Author

and generate password hash as you wish

Read how the password_verify function works

Leonix pushed a commit that referenced this pull request Mar 18, 2022
Squashed commit of the following:

commit 9999ce9
Author: Di Elshin <mail@dmitryelshin.ru>
Date:   Thu Mar 17 17:36:57 2022 +0300

    Update waVerificationChannelSMS.class.php

commit cf44051
Author: Di Elshin <mail@dmitryelshin.ru>
Date:   Thu Mar 17 16:58:41 2022 +0300

    Update waVerificationChannelSMS.class.php

commit 1ef7b4d
Author: Di Elshin <mail@dmitryelshin.ru>
Date:   Thu Mar 17 16:57:31 2022 +0300

    Update waVerificationChannelEmail.class.php

commit 1a2d011
Author: Dmitry Elshin <dima@elsh.in>
Date:   Tue Dec 14 14:56:21 2021 +0300

    Calling a custom function to validate the password hash (wa_password_verify)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants