Password Hash

[ganymede]

As far as i can remember, the password hash generated for users is incorrect, so currently the only way i can test a user account password is by physically logging into the system from my Web Gui - which is in 1 word shocking, please can we fixed the user password hash really simple to do :)

[Mouton]

The password hash saved in the userfiles is OK. You can generate a hash from a plain-text string and compare both to know if the password is correct.
WarC got a .exe that does that, and the old ioB also used this.

[neoxed]

As far as i can remember, the password hash generated for users is incorrect ...
Since when? What lead you to this conclusion? Could you provide the steps required to reproduce this error? Maybe the error is in your web application, how are you comparing the password hashes?

[ganymede]

There was as post on the old forum regarding the password #'s mouton found the error as far as i remember, i dont recal a post saying there was a fix.

[neoxed]

There was as post on the old forum regarding the password #'s mouton found the error as far as i remember, i dont recal a post saying there was a fix.
Perhaps you should have searched the forum before posting?

I believe this (http://www.inicom.net/forum/showthread.php?t=13181) is the bug you're talking about (it's marked as a sticky in the bug forum). This bug is specific to ioFTPD's PHP script interface, not ioFTPD's core. Last I checked, your WebGUI was written as an ASP application and functioned only under IIS (or if your WebGUI is in fact written in PHP, you should have mentioned that in your original post).

By the way, there is no "old forum" - all posts were carried over to the new web-site.

[ganymede]

ok mis-understanding no need to get nasty

[ganymede]

php sux :P