Saving wrong password for Joomla 1.0.14 or earlier

I'd appreciate your help nailing the final issue with nailing this issue I'm having.


All is fine with users filling in the form and getting registered on the J! site. They confirm their email, but at log in they can't enter the right password.

I see in the database it's been stored as
6927913d83057fdd142a61a26c0d76a6:qDcwW3GbXG4NEZup

And usually passwords don't have the : and what's following.

I guess it's a problem with the names or ids of the password and verify password fields.

You can see the form here:
Expression of interest

Many cheers in anticipation😀

Hi anax,

from Joomla 1.0.14 and up the new password hash has been added ":qDcwW3GbXG4NEZup" so this is fine, if it says password wrong then maybe you have an old joomla version ? or there is something wrong somewhere!

Cheers

Max

Thankyou very much for the quick and correct response.

I can't do the update to joomla for a while, thoughI know I must (I'm on 1.0.10 😶 )... you wouldn't know a quick stop-gap measure till I can do the upgrading. Someway of not adding that extra password hash... where does that happen in chrono forms?

cheers

Hi anax,

ok, this is in joomla_registration.php plugin file under components/com_chronocontact/plugins/

feel free to ask about coding if you don't know your way but you should change 1 or 2 lines of code maximum to remove this hash and leave the password as MD5 only!

Cheers

Max

Thanks for your assistance.
I thought I had it but I hadn't. I've been hacking around ln 191 of joomla_registration.php. This is my latest effort. I presume I need to get the mosMakePassword() function in there somewhere.

	/*----------------------------------------------------------my change
		$salt				= mosMakePassword(16);
		$crypt				= md5($row->password.$salt);
		$row->password		= $crypt.':'.$salt;
	*/
	$row->password 		= md5( $row->password );

Cheers.

Hi anax,

Looks like you need:

// $salt = mosMakePassword(16);
$crypt = md5($row->password);
$row->password = $crypt;

Bob

Thanks for amazingly rapid response again.

Tried your suggestion GreyHead, but am still getting all passwords saved in the database as

d41d8cd98f00b204e9800998ecf8427e

no matter what password I type in.

Well, I worked it out. And your code above was right.

I quickly (well not that quickly) figured out that that md5 password pasted in my previous post is the code for nothing.

My mistake was setting the Password Field: in the joomla_registration plugin to 'password' instead of 'password1'.

This is an excellent component. And I'm using it on another site that's joomla1.5 so none of these silly problems. Many cheers😀