From: Andrew Dolgov <fox@madoka.spb.ru>
Date: Wed, 12 Sep 2007 03:58:05 +0000 (+0100)
Subject: use login as salt when generating passwords (2)
X-Git-Tag: 1.2.15~6
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=c3a005adbc29424980c04080d8c66359341b6103;p=tt-rss.git

use login as salt when generating passwords (2)
---

diff --git a/modules/pref-users.php b/modules/pref-users.php
index e554da4c..fdc6d495 100644
--- a/modules/pref-users.php
+++ b/modules/pref-users.php
@@ -73,7 +73,7 @@
 				$password = db_escape_string(trim($_GET["password"]));
 
 				if ($password) {
-					$pwd_hash = 'SHA1:' . sha1($password);
+					$pwd_hash = encrypt_password($password, $login);
 					$pass_query_part = "pwd_hash = '$pwd_hash', ";					
 					print_notice(T_sprintf('Changed password of user <b>%s</b>.', $login));
 				} else {
@@ -101,7 +101,7 @@
 
 				$login = db_escape_string(trim($_GET["login"]));
 				$tmp_user_pwd = make_password(8);
-				$pwd_hash = 'SHA1:' . sha1($tmp_user_pwd);
+				$pwd_hash = encrypt_password($tmp_user_pwd, $login);
 
 				$result = db_query($link, "SELECT id FROM ttrss_users WHERE 
 					login = '$login'");
@@ -146,7 +146,7 @@
 				$login = db_fetch_result($result, 0, "login");
 				$email = db_fetch_result($result, 0, "email");
 				$tmp_user_pwd = make_password(8);
-				$pwd_hash = 'SHA1:' . sha1($tmp_user_pwd);
+				$pwd_hash = encrypt_password($tmp_user_pwd, $login);
 
 				db_query($link, "UPDATE ttrss_users SET pwd_hash = '$pwd_hash'
 					WHERE id = '$uid'");