Manually changing to encryption

I am trying to convert one of my database login pages to encryption instead of plain text.
I have no pc with Windows on it at this point in time so I am trying to do it manually.

I created a separate add user page that is using 'password_hash' and verified that part works properly.

My question is this... Here is the line of webassist code

$Authenticate->addFilter("passwd", "=", "s", "".((isset($_POST["Password"]))?$_POST["Password"]:"") ."");

and here is what I changed it to..

$Authenticate->addFilter("passwd", "=", "s", "".((isset($_POST["Password"]))?password_hash($_POST["Password"], PASSWORD_DEFAULT):"") ."");

I am not getting any errors now but it will not log in... Is there a glaring error anywhere.. What am I missing?

Hoping to get a Windows pc set back up soon but in the mean time I would like this part fixed if possible

Thanks.
Emma.

The UI doesn't fully support hashed passwords, so you have to change the code manually... Update this:

$Authenticate->addFilter("passwd", "=", "s", "".((isset($_POST["Password"]))?password_hash($_POST["Password"], PASSWORD_DEFAULT):"") ."");

to:

$Authenticate->addHash("passwd", "".(isset($_POST["Password"])?$_POST["Password"]:"") ."");

Coming up with this error now.

What version of the authentication.php file do you have? I added the addHash() capability later, maybe you have to install the latest version of DataBridge to get the latest version of that file. I'll send you my version.

I had v1.16. I swapped it out. I get no error but it will not login with a logon/pw that I know are encrypted with the password_hash.

Unless you have another easy idea, I dont want to waste any more of your time. I will have to get a pc up and running with Windows and get Databridge reinstalled. I may have a vm with it on it so I will find out.

Thanks for your help!

Emma

I actually had a mistake in the line of code I gave you. I've corrected it in the post above if you want to try again.

That did it.. Thank you so much...

I still need to do the add and edit user pages but that can wait until I get it the software reinstalled... I have another page to add them with encryption

Have a great rest of the week!
Emma

So I have the login page working fine with encrypted passwords. Have not been able to get it going on the insert and update pages.
My question is this, Can I just tweak those similar lines on the insert and update pages or will more be involved.?

This is the code you gave me for the login page.
$Authenticate->addHash("passwd", "".(isset($_POST["Password"])?$_POST["Password"]:"") ."");

Below are the passwd lines from the update and insert page

$UpdateQuery->bindColumn("passwd", "s", "".((isset($_POST["Password"]))?$_POST["Password"]:"") ."", "WA_IGNORE");

$InsertQuery->bindColumn("passwd", "s", "".((isset($_POST["Password"]))?$_POST["Password"]:"") ."", "WA_DEFAULT");

Thanks so much for your help.

Emma

Use:

$UpdateQuery->bindColumn("passwd", "s", "".((isset($_POST["Password"]))?password_hash($_POST["Password"], PASSWORD_DEFAULT):"") ."", "WA_IGNORE");



$InsertQuery->bindColumn("passwd", "s", "".((isset($_POST["Password"]))?password_hash($_POST["Password"], PASSWORD_DEFAULT):"") ."", "WA_DEFAULT");

Thanks for the quick reply!
I was close.. I tried it but it was in the wrong spot...
Works perfect.

Thanks again! Saved me a BUNCH of time.

Emma