Re: Change Auth component will solve hash without salt?

2008-09-29 Thread michael h
Note: Google Groups seemed to have eaten my first attempt, I hope this isn't a repost! I am also stuck on this hashing issue with my existing database. However, I can't figure out how to create an appropriate object. Could someone take a look at the component I created and help me find what's

Re: Change Auth component will solve hash without salt?

2008-09-29 Thread michael h
I'm still stuck on this same issue because I don't know how to properly create an object. The custom controller I created doesn't seem to cut it. Since I've been stuck on this for days any help would be greatly appreciated!! Thanks! /* My custom controller: */ App::import(array('Router',

Re: Change Auth component will solve hash without salt?

2008-09-11 Thread Yodi Aditya
Hey, dude. Thanks, that's right sha1 is default hashing in auth component. i just convience that using correct hashing sha1 in my controller using beforeFilter(). But, I say before, security.salt needed not only for Auth but hashing cookies too. Disable security.salt is a bad solution. I'm login

Re: Change Auth component will solve hash without salt?

2008-09-11 Thread David C. Zentgraf
Not quite sure I understand your particular issue, but why is the password in your DB pure SHA1? If you're using the Auth component all the way, it will hash the password including Salt when the user registers, so the only thing that should go into the db is SHA1(salt.password). And every

Re: Change Auth component will solve hash without salt?

2008-09-11 Thread Yodi Aditya
Thanks David, I want password in table hashing with sha1 only and without security.salt. in another way, it will make me easy using same table with different framework or CMS. cause sha1 is include on most CMS / framework. Salt? i don't think so. Cookies needed for remember me on login form. I

Re: Change Auth component will solve hash without salt?

2008-09-11 Thread [EMAIL PROTECTED]
There are at least two ways to stop AuthComponent from using the salt. I think the simple hacky way for you in this case is to alter that one line of code in Auth and keep it in your list of small tweaks I have done (I have one of those). Line 811 return Security::hash($password, null, true);

Re: Change Auth component will solve hash without salt?

2008-09-11 Thread yodi
thanks martin. thats help me solve my problem. On 9/11/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: There are at least two ways to stop AuthComponent from using the salt. I think the simple hacky way for you in this case is to alter that one line of code in Auth and keep it in your list

Re: Change Auth component will solve hash without salt?

2008-09-10 Thread Okto Silaban
Why do you need to set Security::setHash('sha1') in beforeFilter() function ? CakePHP use sha1 as default encryption. Meanwhile, you can use this In login form : $this-Auth-password($this-data['User']['password']) -- automatically using sha1 with salt. But if you want CakePHP use no .salt. at

Change Auth component will solve hash without salt?

2008-09-09 Thread Yodi Aditya
I have some users table with 2 value , email and password (hash with sha1). Then i using auth component to make login form. To make sure, that auth will using sha1 when hashing password, i'm using : Security::setHash('sha1'); in beforeFilter(). Problem happen when Auth hashing password from