wilde: server/kolab-webadmin/kolab-webadmin/www/admin/maintainer maintainer.php.in, 1.3, 1.4

cvs at kolab.org cvs at kolab.org
Wed Jan 10 17:00:00 CET 2007


Author: wilde

Update of /kolabrepository/server/kolab-webadmin/kolab-webadmin/www/admin/maintainer
In directory doto:/tmp/cvs-serv5426/kolab-webadmin/kolab-webadmin/www/admin/maintainer

Modified Files:
	maintainer.php.in 
Log Message:
Create SSHA (instead of plain SHA1) password hashes.  (fixes kolab/issue1013)


Index: maintainer.php.in
===================================================================
RCS file: /kolabrepository/server/kolab-webadmin/kolab-webadmin/www/admin/maintainer/maintainer.php.in,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -d -r1.3 -r1.4
--- maintainer.php.in	17 May 2006 23:15:32 -0000	1.3
+++ maintainer.php.in	10 Jan 2007 15:59:58 -0000	1.4
@@ -23,6 +23,7 @@
 require_once('@kolab_php_module_prefix at admin/include/locale.php');
 require_once('@kolab_php_module_prefix at admin/include/authenticate.php');
 require_once('@kolab_php_module_prefix at admin/include/form.class.php');
+require_once('@kolab_php_module_prefix at admin/include/passwd.php');
 
 /**** Functions ***/
 function comment( $s ) {
@@ -202,8 +203,7 @@
        $ldap_object['sn'] = trim($_POST['lastname']);
        $ldap_object['cn'] = trim($_POST['firstname']).' '.$ldap_object['sn'];
        if( !empty( $_POST['password_0'] ) ) {
-		 $ldap_object['userPassword'] = '{sha}'.base64_encode( pack('H*', 
-																	sha1( $_POST['password_0'])));
+		 $ldap_object['userPassword'] = ssha( $_POST['password_0'], gensalt());
        }
        if( $action == 'firstsave' ) $ldap_object['uid'] = trim( strtolower( $_POST['uid'] ) );
 





More information about the commits mailing list