Secure Passwords
| Extension Name | Secure Passwords | Rating | 
|
| License | Free | Votes | 12 |
| Developer | cgsmith | Views | 7560 |
| Date Added | 12 June 2012 |  Request Support |
|
| Date Modified | 24 September 2012 |  Report extension |
|
===============
http://cgsmith.github.com/opencart-extensions/
Donate to support us
===============
If you like this extension or use it, consider donating to keep me making great extensions!
PayPal Donation: http://goo.gl/6Twv4
Description
===============
OpenCart has a security flaw in the database. It uses MD5 hashes for its password management. MD5s and even SHAs are considered insecure by today's standards.
This extension uses bcrypt which uses the blowfish keyring. This will protect your user and customers passwords a lot better than MD5 or SHA.
This will allow backwards compatibility and does not affect user data until the next time an account is created or a user/customer logs in.
Fixed - SQL query file.
Update - Customers passwords are now secured with bcrypt.
9/3/2012 Update - Release 1.5.4x version. Database and code was changed a lot.
Support
===============
You can get support on this extension page or at the form here: http://forum.opencart.com/viewtopic.php?f=22&t=83232
| Download Name | Compatibility | Action |
| Secure Passwords v1.10 | v1.5.0, v1.5.0.1, v1.5.0.2, v1.5.0.3, v1.5.0.4, v1.5.0.5, v1.5.1, v1.5.1.1, v1.5.1.2, v1.5.1.3, v1.5.2, v1.5.2.1, v1.5.3, v1.5.3.1 | [ Download ] |
| Secure Passwords v1.20.154 | v1.5.4.1 | [ Download ] |
Follow the instructions in the readme file. VQmod is required.
Please rate and post comments! Thanks!
==============================================================================
SECURE PASSWORD - Instructions
v1.20.154
This extension changes the default MD5 password hash to a bcrypt password
hash. It will allow current users to still login with the same password and
will update a field in the database with the new hash.
Author: CGSmith.net, LLC
E-mail: chris@cgsmith.net
Website: http://www.cgsmith.net
==============================================================================
All steps are required. As always, backup your DATABASE and OPENCART files!!!
1. Lengthen the 'password' fields in the database under 'customer' and 'user' to
256 charactors. See example SQL file.
2. Place the 'system' folder in OpenCart via FTP. No files are overwritten.
3. Place the 'vqmod' folder in OpenCart via FTP. No files are overwritten.
4. Login and create a user to make sure everything works.
5. Check the database for the new password hashes and delete the 'password' field
from the database when it is safe to do so.
Tags secure, password, MD5, bcrypt, passwords, secure passwords, issues, bugs, flaws
Log in to comment or register here.