Re: Bypassing Security Salt

2009-07-28 Thread Steppio
The best solution that i have found is located at the bottom of this page, basically to disable security salting from with the Auth component within the Password function: http://www.mail-archive.com/cake-php@googlegroups.com/msg50946.html hope it clears up someone else's confusion too, thank yo

Re: Bypassing Security Salt

2009-07-28 Thread Steppio
Yeah its coming back non-encrypted, thanks for the heads up, do you know how i would apply just sha1 encryption to it from there? On Jul 28, 6:17 am, Andras Kende wrote: > Yes, its overwrites cake's hashPassword function to not to salt the   > password put the code into usually user model > and

Re: Bypassing Security Salt

2009-07-27 Thread Andras Kende
Yes, its overwrites cake's hashPassword function to not to salt the password put the code into usually user model and see if the password is encrypted in the debug display... Andras On Jul 27, 2009, at 4:52 PM, Steppio wrote: > > @Miles J, thanks for the post but im using alot of cookies so

Re: Bypassing Security Salt

2009-07-27 Thread Miles J
You can create your own auth.php file in your components, then copy and paste the original here. Once you have done that, you can configure the Auth to work how you want it to, without overriding the core one. --~--~-~--~~~---~--~~ You received this message because

Re: Bypassing Security Salt

2009-07-27 Thread Steppio
@Miles J, thanks for the post but im using alot of cookies so i need the salt value set in core, just not used in the authentication process. @Andras Kende, thanks mate, do you know what it does? On Jul 27, 9:14 pm, Andras Kende wrote: > Hello, > > You could try in your model: > >   function ha

Re: Bypassing Security Salt

2009-07-27 Thread Andras Kende
Hello, You could try in your model: function hashPasswords($data){ return $data; } Andras On Jul 27, 2009, at 1:53 PM, Steppio wrote: > > Hi there, > I was wondering if anybody knows a way to bypass the salting that the > Security component automatically gives to a password? > > The

Re: Bypassing Security Salt

2009-07-27 Thread Miles J
Just set the configure salt to empty. --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake

Re: Bypassing Security Salt

2009-07-27 Thread Steppio
Yes thanks that helps a little, still a tad confusing though. I've found a few more links that may be of interest to us both: http://www.nabble.com/Auth-%3Eauthenticate-in-beforeFilter-causes-Auth-issues-td24231179.html http://teknoid.wordpress.com/2008/10/08/demystifying-auth-features-in-cakephp

Re: Bypassing Security Salt

2009-07-27 Thread Piotr Kilczuk
Hello, > I was wondering if anybody knows a way to bypass the salting that the > Security component automatically gives to a password? > > The problem is that i have a database of old passwords and im > converting the site into a CakePHP site, however when im trying to log > in to the new site th

Bypassing Security Salt

2009-07-27 Thread Steppio
Hi there, I was wondering if anybody knows a way to bypass the salting that the Security component automatically gives to a password? The problem is that i have a database of old passwords and im converting the site into a CakePHP site, however when im trying to log in to the new site the passwor