Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity

Bug 28772: Add a warning about hash_password usage in updatedatabase.pl

Browse source 
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
This commit is contained in:
Tomás Cohen Arazi 2021-08-30 11:08:57 -03:00 committed by Kyle M Hall
parent 2acf4ff1b0
commit b80923d233
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
Koha/AuthUtils.pm
View file

@ -51,9 +51,15 @@ user passwords.
my $hash = Koha::AuthUtils::hash_password($password, $settings);
Hash I<$password> using Bcrypt. Accepts an extra I<$settings> parameter for salt.
If I<$settings> is not passed, a new salt is generated.
WARNING: If this method implementation is changed in the future, as of
bug 28772 there's at least one DBRev that uses this code and should
be taken care of.
=cut
# Using Bcrypt method for hashing. This can be changed to something else in future, if needed.
sub hash_password {
my $password = shift;
$password = Encode::encode( 'UTF-8', $password )