|
|
| Author |
Message |
dent
Guest
|
 Posted: Wed Apr 09, 2003 6:18 pm Post subject: PASSWORD function missing in 0.68a ? |
 |
|
I'm trying to track down my issue with not being able to use the passwords that are stored in the database, and my issue seems to be that there is no function called PASSWORD. I'm assuming this should really be "md5" or something, almost as if the string "PASSWORD" was supposed to be replaced during the install?
In trying to fix this, I temporarily removed the calls to PASSWORD (so the passwords would be stored in plain text in the DB) and printed out what the username and password are when a password check is done so I could see what was happening by inserting this into auth_login.php:
| Code: | | print("user=$username\npass=$password\nrows=$rows_user\n"); |
What I get is:
| Code: | user=dent&password=test&action=login
pass=test
rows=0 |
Notice how the username contains a lot more than just the username!
Have I just fundamentally botched the install of Cacti 0.68a? |
|
| Back to top |
|
 |
bulek
Cacti Pro User
Joined: 20 May 2002
Posts: 852
Location: Poland
|
| Posted: Thu Apr 10, 2003 4:18 am Post subject: |
|
|
PASSWORD function is included in mysql query. It is run by mysql not php so you can't find the function definition in the code. Another thing is that docs say it should not be used by user application (use MD5 or SHA1 instead).
Anyway something is wrong with your installation because it works for most of people out there.
- bulek |
|
| Back to top |
|
|
raX
Lead Developer
Joined: 13 Oct 2001
Posts: 2235
Location: Carlisle, PA
|
| Posted: Mon Apr 14, 2003 12:13 am Post subject: |
|
|
| bulek wrote: | | PASSWORD function is included in mysql query. It is run by mysql not php so you can't find the function definition in the code. Another thing is that docs say it should not be used by user application (use MD5 or SHA1 instead). |
Yeah, I found that out the hard way when I started working with MSSQL/cacti for 0.8. If you take a look at 0.8's login procedure, it is now silently converting the old PASSWORD() hashes into MD5() so that it will be more cross-db compatible.
-Ian |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Register
Profile
Log in to check your private messages
Log in
