Bug #17987 ยป 20080113_feuser_password_encryption.diff
| t3lib/class.t3lib_userauth.php (working copy) | ||
|---|---|---|
|
* @return boolean true if login data matched
|
||
|
*/
|
||
|
function compareUident($user, $loginData, $security_level='') {
|
||
|
global $TYPO3_CONF_VARS;
|
||
|
$OK = FALSE;
|
||
|
$security_level = $security_level ? $security_level : $this->security_level;
|
||
| ... | ... | |
|
}
|
||
|
break;
|
||
|
default: // normal
|
||
|
if($this->loginType == 'FE') {
|
||
|
if ($TYPO3_CONF_VARS['FE']['passwordType'] == 'md5') {
|
||
|
$loginData['uident'] = md5($loginData['uident']);
|
||
|
}
|
||
|
}
|
||
|
if ((string)$loginData['uident'] === (string)$user[$this->userident_column]) {
|
||
|
$OK = TRUE;
|
||
|
}
|
||
| t3lib/config_default.php (working copy) | ||
|---|---|---|
|
'hidePagesIfNotTranslatedByDefault' => FALSE, // If TRUE, pages that has no translation will be hidden by default. Basically this will inverse the effect of the page localization setting "Hide page if no translation for current language exists" to "Show page even if no translation exists"
|
||
|
'eID_include' => array(), // Array of key/value pairs where key is "tx_[ext]_[optional suffix]" and value is relative filename of class to include. Key is used as "?eID=" for index_ts.php to include the code file which renders the page from that point. (Useful for functionality that requires a low initialization footprint, eg. frontend ajax applications)
|
||
|
'XCLASS' => Array(), // See 'Inside TYPO3' document for more information.
|
||
|
'pageCacheToExternalFiles' => FALSE // If set, page cache entries will be stored in typo3temp/cache_pages/ab/ instead of the database. Still, "cache_pages" will be filled in database but the "HTML" field will be empty. When the cache is flushed the files in cache_pages/ab/ will not be flush - you will have to garbage clean manually once in a while.
|
||
|
'pageCacheToExternalFiles' => FALSE, // If set, page cache entries will be stored in typo3temp/cache_pages/ab/ instead of the database. Still, "cache_pages" will be filled in database but the "HTML" field will be empty. When the cache is flushed the files in cache_pages/ab/ will not be flush - you will have to garbage clean manually once in a while.
|
||
|
'passwordType' => 'plain' // String for Password encryption. Possible values are plain (no encryption) and md5
|
||
|
),
|
||
|
'MODS' => Array( // Backend Module Configuration (obsolete, make extension instead)
|
||
|
),
|
||
| typo3/sysext/cms/tbl_cms.php (working copy) | ||
|---|---|---|
|
);
|
||
|
// check for password encryption
|
||
|
if($GLOBALS['TYPO3_CONF_VARS']['FE']['passwordType']=='md5') {
|
||
|
$TCA['fe_users']['columns']['password']['config']['eval'] = 'required,md5,password';
|
||
|
}
|
||
|
// ******************************************************************
|
||
|
// fe_groups
|
||
|
//
|
||