Page 1 of 1
MD5 Password Hash opencart 3
Posted: Tue Sep 04, 2018 9:53 pm
by elpidios
Is the default opencart 3 password MD5?
Also how can I get the password HASH so to be able to post it in a WEB API??
Re: MD5 Password Hash opencart 3
Posted: Tue Sep 04, 2018 10:01 pm
by straightlight
Starting from OC v3.1.0.0a release, MD5 algorithm is no longer supported. system/library/cart/customer.php and user.php file - > login method.
Re: MD5 Password Hash opencart 3
Posted: Tue Sep 04, 2018 10:24 pm
by elpidios
so if i update my opencart to 3.1.1.0 my users will not be able to login?
Re: MD5 Password Hash opencart 3
Posted: Tue Sep 04, 2018 10:29 pm
by straightlight
Without modifications, since MD5 has been removed for new customers / users starting on this release, only old customers / users will be able to login with MD5 versus new customers / users.
Re: MD5 Password Hash opencart 3
Posted: Wed Sep 05, 2018 3:10 am
by elpidios
Great you mention this to me as I am new site and I dont have users. When the new version will release? For sure to disable MD5 is regarding security, so no point for me to launch the website before the new release. When it will be available?
Re: MD5 Password Hash opencart 3
Posted: Wed Sep 05, 2018 3:11 am
by straightlight
No official date has been released, yet. More information:
viewtopic.php?f=2&t=205940
Re: MD5 Password Hash opencart 3
Posted: Wed Oct 23, 2019 7:41 pm
by whaat
Its only sha1, not good...
Re: MD5 Password Hash opencart 3
Posted: Fri Nov 01, 2019 9:29 pm
by straightlight
The latest OC versions also mySQL functions to validate passwords.