Forums

Saving wrong password for Joomla 1.0.14 or earlier

anax 12 Aug, 2008
I'd appreciate your help nailing the final issue with nailing this issue I'm having.


All is fine with users filling in the form and getting registered on the J! site. They confirm their email, but at log in they can't enter the right password.

I see in the database it's been stored as
6927913d83057fdd142a61a26c0d76a6:qDcwW3GbXG4NEZup

And usually passwords don't have the : and what's following.

I guess it's a problem with the names or ids of the password and verify password fields.

You can see the form here:
Expression of interest

Many cheers in anticipation😀
Max_admin 13 Aug, 2008
Hi anax,

from Joomla 1.0.14 and up the new password hash has been added ":qDcwW3GbXG4NEZup" so this is fine, if it says password wrong then maybe you have an old joomla version ? or there is something wrong somewhere!

Cheers

Max
Max, ChronoForms developer
ChronoMyAdmin: Database administration within Joomla, no phpMyAdmin needed.
ChronoMails simplifies Joomla email: newsletters, logging, and custom templates.
anax 15 Aug, 2008
Thankyou very much for the quick and correct response.

I can't do the update to joomla for a while, thoughI know I must (I'm on 1.0.10 😶 )... you wouldn't know a quick stop-gap measure till I can do the upgrading. Someway of not adding that extra password hash... where does that happen in chrono forms?

cheers
Max_admin 15 Aug, 2008
Hi anax,

ok, this is in joomla_registration.php plugin file under components/com_chronocontact/plugins/

feel free to ask about coding if you don't know your way but you should change 1 or 2 lines of code maximum to remove this hash and leave the password as MD5 only!

Cheers

Max
Max, ChronoForms developer
ChronoMyAdmin: Database administration within Joomla, no phpMyAdmin needed.
ChronoMails simplifies Joomla email: newsletters, logging, and custom templates.
anax 30 Aug, 2008
Thanks for your assistance.
I thought I had it but I hadn't. I've been hacking around ln 191 of joomla_registration.php. This is my latest effort. I presume I need to get the mosMakePassword() function in there somewhere.
	/*----------------------------------------------------------my change
		$salt				= mosMakePassword(16);
		$crypt				= md5($row->password.$salt);
		$row->password		= $crypt.':'.$salt;
	*/
	$row->password 		= md5( $row->password );


Cheers.
GreyHead 30 Aug, 2008
Hi anax,

Looks like you need:
// $salt = mosMakePassword(16);
$crypt = md5($row->password);
$row->password = $crypt;


Bob
anax 30 Aug, 2008
Thanks for amazingly rapid response again.

Tried your suggestion GreyHead, but am still getting all passwords saved in the database as

d41d8cd98f00b204e9800998ecf8427e

no matter what password I type in.
anax 30 Aug, 2008
Well, I worked it out. And your code above was right.

I quickly (well not that quickly) figured out that that md5 password pasted in my previous post is the code for nothing.

My mistake was setting the Password Field: in the joomla_registration plugin to 'password' instead of 'password1'.

This is an excellent component. And I'm using it on another site that's joomla1.5 so none of these silly problems. Many cheers😀
This topic is locked and no more replies can be posted.