password, salt, password_hash ?
By adrew22a
I'm trying to import my database into a new database and im confused on the passwords. Some users have Password and Salt, then some users just have password_hash. Whats the difference?
Elgg Technical Support
Get support from other Elgg users
- Matt Beckett@Beck24
Matt Beckett - 0 likes
- ihayredinov@ihayredinov
ihayredinov - 0 likes
- Klaas@KlaasHobo
Klaas - 0 likes
- Steve Clay@steve_clay
Steve Clay - 0 likes
- Juho Jaakkola@juho.jaakkola
Juho Jaakkola - 1 like
- Klaas@KlaasHobo
Klaas - 0 likes
You must log in to post replies.where are you seeing 'password_hash'?
Since around 1.10, Elgg started using built-in PHP password hashing. Salt-based hashes are dropped upon user's next login. For a while you will see a mix of both until all users' hashes are upgraded to a more secure algorithm.
When I upgrade a few Elgg 1.9.x sites to 1.10.x or above, I always have problems with no being able to login any more. When I am in the site during upgrade I can do almost everyting as an admin but after logging off I cannot login again. After more then 10 times with different sites trying I am near to giving up! I get the message below when trying to login again, does anyone has an idea what to do?
Unknown column 'password_hash' in 'field list'
QUERY: UPDATE elgg_users_entity
SET name='Beheerder', username='klass', password='', salt='',
password_hash='$2y$10$26qHlpU6zwxxxxxxxxxxxxxxxxxxK8fZ0tUyyyyyyyyyyyyyUOpxLu', email='k.hobo@synergypartners.nl', language='nl'
WHERE guid = 35
The password_hash column is added in the upgrade script for 1.10. Make sure you run /upgrade.php immediately after updating the code.
Also make sure you always upgrade one minor version at a time (1.9 -> 1.10 -> 1.11). There is a known bug, that the password_hash upgrade does not get run, if you skip versions.
Thank for this suggestions. I only have this issue when migrating from 1.9.8 to 1.10.1. I will try again to run the upgrade script.