fb94bd11fb
[ticket/13917] Do not pass non-string variables to hash_equals()
...
PHPBB3-13917
2015-06-04 17:16:22 +02:00
852337cacd
[ticket/13917] Use hash_equals() if it's available
...
PHPBB3-13917
2015-06-04 16:52:08 +02:00
8769f185f5
[ticket/13772] Fix typo in phpbb\passwords\manager::__construct()
...
PHPBB3-13772
2015-04-21 10:00:30 +01:00
0bc04a4df0
[ticket/13203] Use string_compare method in passwords drivers
...
PHPBB3-13203
2014-10-22 14:54:55 -05:00
2b47ef1266
[ticket/13203] Add method for byte by byte comparison to drivers helper
...
PHPBB3-13203
2014-10-22 14:54:22 -05:00
09fc008e62
[ticket/12721] Add Squiz.ControlStructures.ElseIfDeclaration in legacy
...
PHPBB3-12721
2014-06-16 22:35:41 +02:00
5dfb1cc66a
[ticket/12715] Cleanup comments in \phpbb\passwords\*
...
PHPBB3-12715
2014-06-15 19:14:59 +02:00
ac311e1b39
[ticket/12352] Do not check hashes that don't have the necessary length
...
This should significantly reduce the time spent on checking hashes of
passwords that should be converted.
PHPBB3-12352
2014-06-02 10:14:26 +02:00
94b2b64ca1
[ticket/12352] Update file headers to fit new format
...
PHPBB3-12352
2014-06-01 21:36:53 +02:00
4b3aacfd18
[ticket/12352] Add get_settings_only method to passwords driver base
...
PHPBB3-12352
2014-06-01 21:31:05 +02:00
f3eba6275a
[ticket/12352] Add passwords driver for xenforo 1.0, 1.1 passwords
...
PHPBB3-12352
2014-06-01 21:31:05 +02:00
cf61d35d75
[ticket/12352] Add driver for woltlab community framework 1 passwords
...
PHPBB3-12352
2014-06-01 21:31:05 +02:00
2d7593995e
[ticket/12352] Add driver for woltlab community framework 2 passwords
...
PHPBB3-12352
2014-06-01 21:31:05 +02:00
61a5fd59cf
[ticket/12352] Add missing $ to md5_mybb and md5_vb driver
...
PHPBB3-12352
2014-06-01 21:31:05 +02:00
c6e1b51d78
[ticket/12352] Add passwords driver for vB passwords
...
PHPBB3-12352
2014-06-01 21:31:05 +02:00
252a061864
[ticket/12352] Use correct hashing method in md5_mybb driver
...
PHPBB3-12352
2014-06-01 21:31:05 +02:00
af25aef04c
[ticket/12352] Add driver for myBB md5 passwords
...
PHPBB3-12352
2014-06-01 21:31:05 +02:00
dc5a5a7cdf
[ticket/12352] Rename phpbb2_md5 driver to fit filenames of other drivers
...
PHPBB3-12352
2014-06-01 21:31:05 +02:00
033272f968
[ticket/12352] Add passwords driver for sha1 password hashes
...
PHPBB3-12352
2014-06-01 21:31:04 +02:00
d9e49fae23
[ticket/12352] Check phpBB2 passwords that have been encrypted with phpass
...
PHPBB3-12352
2014-06-01 21:31:04 +02:00
5a243af879
[ticket/12352] Add driver for phpBB2 hashes with md5 length of 32
...
PHPBB3-12352
2014-06-01 21:31:04 +02:00
60cb648ab0
[ticket/12352] Remove code for converting passwords in db auth provider
...
PHPBB3-12352
2014-06-01 21:31:04 +02:00
2a96b9e285
[ticket/12352] Use $CP$ prefix for converting passwords in manager
...
PHPBB3-12352
2014-06-01 21:31:04 +02:00
1e758ba7f0
[ticket/12352] Add passwords driver for passwords that should be converted
...
This driver will only be used for getting the new $CP$ prefix that will signal
that the hash is a legacy hash that needs to be converted.
PHPBB3-12352
2014-06-01 21:31:04 +02:00
68f59defb0
[ticket/12352] Mark salted md5 and phpass passwords driver as legacy
...
PHPBB3-12352
2014-06-01 21:31:04 +02:00
ee72e7b3ad
[ticket/12352] Introduce user row to passwords check methods
...
This will ensure that legacy hash types that might need the user row can
properly check if the supplied password is correct.
PHPBB3-12352
2014-06-01 21:31:04 +02:00
2ea45a06e7
[ticket/12352] Add legacy passwords driver for sha1 smf type passwords
...
PHPBB3-12352
2014-06-01 21:31:04 +02:00
a759704b39
[ticket/12594] Remove @package tags and update file headers
...
PHPBB3-12594
2014-05-27 20:51:13 +02:00
b094c79996
[feature/passwords] Move combined hashing methods to manager
...
This will get rid of the circular dependency between the passwords manager
and the passwords helper. The combined_hash_password() method was also
slightly changed to allow both the definitions of service names or prefixes
for the hash types.
PHPBB3-11610
2014-02-02 14:57:43 +01:00
08a8bd8e6f
[feature/passwords] Add support for passwords driver service name in hash()
...
This will allow users to specify both the hash type by prefix and by its
service name.
PHPBB3-11610
2014-02-02 14:13:21 +01:00
292961a277
[feature/passwords] Get rid of set_name/get_name methods for passwords drivers
...
PHPBB3-11610
2014-02-02 14:09:09 +01:00
4b832cf2bd
[feature/passwords] Intialize output array before usage in passwords helper
...
PHPBB3-11610
2013-12-29 17:57:17 +01:00
1465915830
[feature/passwords] Remove unneeded definitions of full namespace
...
PHPBB3-11610
2013-12-29 17:56:41 +01:00
8383d1f1d3
[feature/passwords] Add missing documentation to docblocks
...
Also contains some minor spacing changes.
PHPBB3-11610
2013-12-29 17:55:00 +01:00
141bef75cb
[feature/passwords] Undo simplification to bcrypt driver
...
By simplifying, a needed part was removed that is actually required.
PHPBB3-11610
2013-12-29 17:04:38 +01:00
808c54fa89
[feature/passwords] Get rid of unneeded code complexity
...
Simplified a little bit of code as pointed out by imkingdavid on github.
PHPBB3-11610
2013-12-29 16:33:09 +01:00
555cd025b2
[feature/passwords] Remove unnecessary specification of namespace in drivers
...
PHPBB3-11610
2013-12-29 16:17:37 +01:00
b37549ce63
[feature/passwords] Remove IN_PHPBB check from passwords files
...
PHPBB3-11610
2013-12-29 14:07:27 +01:00
5193b3279c
[feature/passwords] Pass list of default types to passwords manager
...
This list is in the order of how the driver types would be used. If a driver
is not supported we will try the subsequent one.
PHPBB3-11610
2013-10-27 14:18:02 +01:00
bb836b65e3
[feature/passwords] Integrate convert_flag with db auth provider
...
PHPBB3-11610
2013-10-25 15:21:09 +02:00
87bd628241
[feature/passwords] Minor cleanup in passwords files
...
PHPBB3-11610
2013-10-14 14:31:00 +02:00
ce51f878eb
[feature/passwords] Add phpass copyright notice to salted md5 driver
...
PHPBB3-11610
2013-10-11 09:43:30 +02:00
fdf9ae7c18
[feature/passwords] Increase test coverage to 100% of methods
...
Obsolete code that is impossible to hit has been removed and the logic
of the salted md5 driver has been changed to correctly implement the
phpBB 3.0 phpbb_hash() function.
PHPBB3-11610
2013-10-10 12:01:10 +02:00
cd74fb0946
[feature/passwords] Increase test coverage to 35 out ouf 36 methods
...
Only one small code part in the salted md5 driver can't be tested right now.
Passwords helper and passwords driver helper are now fully covered by tests.
PHPBB3-11610
2013-10-09 22:53:13 +02:00
f1d2949985
[feature/passwords] Move check for 8-bit characters to bcrypt driver
...
PHPBB3-11610
2013-10-07 16:00:52 +02:00
afb7d2e616
[feature/passwords] Rename manager methods to check() and hash()
...
These method names are more straightforward than the previous ones.
PHPBB3-11610
2013-10-02 13:30:36 +02:00
61e4c0f251
[feature/passwords] Do not hash passwords longer than 4096 bytes
...
PHPBB3-11610
2013-10-01 17:38:52 +02:00
3ebff0a960
[feature/passwords] Pass config via service container to driver helper
...
This will get rid of the global $config in the driver helper
PHPBB3-11610
2013-09-28 12:42:11 +02:00
de087d537e
[feature/passwords] A few more corrections in methods due to namespacing
...
PHPBB3-11610
2013-09-28 12:41:02 +02:00
3f63b9b470
[feature/passwords] Modify passwords files for namespacing changes
...
PHPBB3-11610
2013-09-27 11:16:47 +02:00
