unable to store hashed password

PHPMaker General Discussion (PHPMaker)
1

I have just installed PHPMaker 2021.0.3.
i am making a new user, but it is not storing hashed password. Even storing simple text password.
I have checked the following:
Tools, Advance Settings, Use Password hash (checked)
Encrypt username and password (checked)i have also checked :
Security Settings, Advance, User Login Options, Password (Hashed Password checked)But nothing is working.Any advise ?

2

what type of field did you specify and what is the length, hashed and encrypted field types will have very long text

3

The field type is varchar and the length is 100

4

more than enough…after making the changes did you re-generate all the files including the config files.
is the field specified as password as well or regular text

5

Yes, i regenerated all the script.
Yes, the field type is password.

6

Beware that if you enable “Use password hash” from “Tools” → “Advanced Settings” and also enabled “Hashed password” from “Security” → “Advanced” → “User Login Options” → “Password”, but the user table is still storing old MD5 passwords or plain text passwords, users will NOT be able to login.

Since MD5 passwords cannot be decrypted, you MUST reset the passwords for the users first, or ask users to reset their passwords themselves.

7

The concern is not about the old user’s passwords. The concern is about newly generated user’s passwords.

8

The new password will be generated by system based on your settings you already have chosen. As mentioned before, ask your end-users to reset their password by themselves.

9

The field type is varchar and the length is 100

Try increasing the length (e.g. to 255).

10

I have the same issue
password field is set to 255 characters
hash password is enabled both in Advanced Seppings and in Security SettingsPassword is still being stored in plain text, and I can only login with hard coded admin account

11
  1. Make sure you generate all scripts again after changing the security settings.
  2. Note that old passwords in the user table will not be changed. You need to update them yourself or ask the users to reset.
12

I have done that - regenerated ALL scripts, and even with Composer Update.
I just checked another project of mine which IS working, and there under Security > Advanced > User Login Options I have:

  • Hashed password
  • Case-sensitive password
    both selected.
    But under Project advanced settings I have “Use password hash” unchecked

I’ll try this same combination on the other project and post back here later with the result.

13

arbei wrote:

Note that old passwords in the user table will not be changed. You need to update them yourself or ask the users to reset.

mobhar wrote:

As mentioned before, ask your end-users to reset their password by themselves.

14

OK I got it working - turns out the issue may in fact be with file timestamps
I had already updated all files and uploaded them on FTP using the “overwrite if source is newer” option.
Didn’t work
So I just overwrote all files unconditionally, then it started working…