ExpressionEngine CMS
Open, Free, Amazing

Thread

This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.

The active forums are here.

Members import: password encryption

July 11, 2011 11:29am

Subscribe [2]
  • #1 / Jul 11, 2011 11:29am

    Pv Ledoux

    95 posts

    Hi there,

    I’m sure that the question has already been asked 100x before but I have 2500 users in our current custom CMS that I have to import in EE.

    The password is currently encrypted both in MD5 and SHA1 in our databases. I have a SQL query selecting first in SHA1 and “fallbacking” in MD5 if the user is not found.

    Is there a similar mechanism in EE?

    Thanks!


    Pv

  • #2 / Jul 12, 2011 8:37am

    Sue Crocker

    26054 posts

    Hi, Pv Ledoux.

    If EE “sees” an MD5 password, when the user logs in, it is converted to SHA1 automagically. So as long as you have the passwords in either format (or even as ascii text), you’ll be OK with importing.

    As always, make sure to backup your database before attempting any sort of import.

    Does that help?

  • #3 / Jul 12, 2011 9:54am

    Pv Ledoux

    95 posts

    Hi Sue,

    so, To be sure I understand, if I import my users with mixed MD5 and SHA1 password, I don’t have to be worry?

  • #4 / Jul 12, 2011 12:10pm

    Sue Crocker

    26054 posts

    You shouldn’t have to worry - but I’d test it with a local install and just two passwords.

  • #5 / Jul 12, 2011 12:32pm

    Pv Ledoux

    95 posts

    Ok, great! Thanks a lot Sue!

    Best regards,

    Pv

  • #6 / Jul 12, 2011 3:41pm

    Sue Crocker

    26054 posts

    Going to go ahead and close this one. If anything else comes up, please do let us know in a new thread..

.(JavaScript must be enabled to view this email address)

ExpressionEngine News!

#eecms, #events, #releases