Post by Guardian » Fri Jun 10, 2011 5:44 pm

I am want to transfer my existing clients to OpenCart (v 1.5.2) but I am curious as to what encryption algorithm you are using. My existing database uses a plain MD5 password encryption by using MySQL's built in MD5 function on the password field in the database.
I see from the customer table you are only using varchar(40) so I'm assuming you use some algorithm before storing the password.
Are you using PHP to encrypt to MD5 or do you use something else like SHA1?
Do you use a salt as well?

I'm just trying to figure out if I can transfer my existing client data so they can log-in without any problems or whether I should just give them all unique passwords and get them to use the lost password option.

New member

Posts

Joined
Fri Jun 10, 2011 5:34 pm

Post by SXGuy » Fri Jun 10, 2011 6:42 pm

I would ask them to either reregister with the same details, or decrypt the passwords yourself and register them all on opencart.

Reason being, opencart uses its own custom password encryption, and i think you would have a hard time intergrating it.

Active Member

Posts

Joined
Sun Nov 08, 2009 2:07 am

Post by Guardian » Fri Jun 10, 2011 6:58 pm

You cannot normally decrypt MD5, though there are rainbow tables for common words or password combination but it would take months, if not not years to do that.
At least you have confirmed OpenCart uses a custom algorithm so the best thing for me to do is simply generate a random password and let them use the lost password functionality.
Once I have got the client details migrated it shouldn't bee too bad migrating their existing purchses because I only deal in digital products and only need to know when the purchase was made and which product (for support/product upgrades).

Thanks a lot for your help

New member

Posts

Joined
Fri Jun 10, 2011 5:34 pm

Post by Guardian » Fri Jun 10, 2011 7:26 pm

I actually just finished doing some testing and it seems OpenCart actually stores a standard MD5 encrypted password with no salt etc so I will be able to transfer my existing client data without any issues - nice!

New member

Posts

Joined
Fri Jun 10, 2011 5:34 pm
Who is online

Users browsing this forum: No registered users and 6 guests