@LOGIN`ACTION:
// before elgg's stuff
// try phppass first
$return=(\phppass_authenticate($username,$password));
if($return){ // ok & phppass re-hash already
return true
}else{
$return=elgg_authenticate($username,$password)
if($return){ // ok - now re-hash using phppass
//re-hash & save
$rehash=phppass_rehash($username,$password))
}
return true
}
return false
function phppass_authenticate($username,$password)){
...
}
function phppass_rehash($username,$password)){
...
}
Sem: I will message you.
Please can anybody say what the current status on this issue is?
Thank you
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by Raül Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.