Thread

hi there,

I have checked that the password field of the member table is using md5. How do i configue ee2 to use sha1 instead?

thank you

Did you import the users, or did you set EE initially to use MD5?

hi sue,
Yes iam importing members. I cant remember what was set and how it was set when i installed it. But i know that it is md5 encrypted and i just want to know a way that i can change it back to sha1. It is a simple config setting somewhere?

thanks

al

You don’t need to do anything. Once they log in, EE will convert the MD5 password to SHA1 for you. Does that help?

Hi Sue,

Iam slightly confused as the passwords are stored in the db as md5. I dont see what you mean by autoconvert. I would have thought there is a setting to change so that for new users, their password would be stored as sha1 and for existing users, they would just have to reset…

al

Once an existing user logs in, EE looks at the database, sees that the password is in MD5 format, converts it to SHA1 and changes it on the fly. If the user never logs in at least once, the password stays in MD5 format.

The conversion occurs in /system/expressionengine/controllers/cp/login.php around line 231.

Does that help?

ahh right! Now it totally makes sense.

thanks heaps Sue….

Hi Al,

Glad that Sue was able to help you with this. Please post back if required.

Cheers

Greg