[geeklog-devel] Password Hash Upgrade

[Tom]

Hey Vinny,

 

I was wondering if you knew when you could get your password hash upgrade
pushed into the repository?

 

Tom

 

From: geeklog-devel-bounces at lists.geeklog.net
[mailto:geeklog-devel-bounces at lists.geeklog.net] On Behalf Of Vincent Furia
Sent: August-10-11 10:46 AM
To: Geeklog Development
Subject: Re: [geeklog-devel] Good Location for New Configuration Items

 

The way I plan to implement the password_hash function will handle a site
owner changing those values in a matter transparent to the site's users.

 

-Vinny

On Wed, Aug 10, 2011 at 04:19, Rouslan Placella <rouslan at placella.com>
wrote:

On Wed, 2011-08-10 at 01:35 -0600, Vincent Furia wrote:
> I currently have two new configuration items for the password hash
upgrade.
> One for password algorithm and one for hash stretch. As of now, I created
a
> new fieldset called "Password Settings" that contain those two
configuration
> items and placed it in the "Login Settings" tab of the "User and
> Submissions" subgroup. Is there a better place to put these options?
Should
> they be in their own tab?

I'd say these values should be hard-coded, since changing them on a live
site will lock all users out of their accounts.

Rouslan

_______________________________________________
geeklog-devel mailing list
geeklog-devel at lists.geeklog.net
http://eight.pairlist.net/mailman/listinfo/geeklog-devel

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist8.pair.net/pipermail/geeklog-devel/attachments/20120122/b5cd3822/attachment.html>