Sha1

Is this correct?

Login Page.

"columnValues" => explode($WA_Auth_Separator,"".((isset($_POST["username"]))?$_POST["username"]:"") ."'".$WA_Auth_Separator."".WA_SHA1Encryption(((isset($_POST["userpassword"]))?$_POST["userpassword"]:"")) .""),


Registration Page:

$insertSQL = sprintf("INSERT INTO users (username, password, email, first_name, last_name, city, `state`, country, zip, permissions, active) VALUES (%s, SHA1(%s), %s, %s, %s, %s, %s, %s, %s, %s, %s)",
GetSQLValueString($_POST['username'], "text"),
GetSQLValueString($_POST['password'], "text"),

Note SHA1 function usage on insert.

Values get inserted correctly... But it won't login no matter what I try, I've redone the entire wizard from start to end.

<pre><?php var_dump($_SESSION); ?></pre>

Produces.

array(0) {
}

safe_mode= Off etc.

Please help.

The registration page should be storing the password in the database in encrypted format. To accomplish that, you need to remove the Dreamweaver insert record server behavior, and replace it with the DataAssist Insert Record Server Behavior. The DataAssist insert record server behavior will allow you to apply the SHA1 formatting to the password column.

See the Introduction to SecurityAssist -> Modifying Registration tutorial in the Solution Recipes Section of the Security Assist support page:
securityassist/

It looks as if the the Sha1 is added to the insert...I think the issue lies with the login - which - you want to be sure that you are applying the Sha1 encryption to the password's POST value on the login page BEFORE comparing values to the password of the database. On the authenticate user behavior, you should be able to access Sha1 in the dialogue box to apply to the password value.

Cheers,

Brian