convert current plain passwords column with password_hash

PHPMaker General Discussion (PHPMaker)
1

Hi,Happy new year to all. Currently I have more than 2000 users in my phpmaker site but all passwords are stored in plan text. Before setting “Use password hash” I’ll need to get each password_hash, and then replace plain passwords so that users still login without problems.is there a way to transform all the passwords within phpmaker enviorment?Thanks,

2

There is no such feature, you need to write a simple script to update the passwords in the users table yourself.

3

Thank you,Before convert all the passwords with hash_password I’ve created a new project to test.First I get the hash password of “testpassword” using:hash_password(‘testpassword’, PASSWORD_DEFAULT);I store the result directly to my database to my demo user password field and then I try to login with “demo” and “testpassword”, but it says that username or password is incorrect.Is there anything I’m doing wrong?

4

You should add a new field to store the converted password, in addition to the old field that store the plain text, so that you won’t lose your original password for experimental action.

5

Make sure you have enabled Use password hash. If you have not enabled Case-sensitive password, make sure you convert your plain password to lowercase first.