tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 12:05:37 +00:00
Code Issues Projects Releases Wiki Activity

MINOR Reverting Member "AutoLoginHash", "RememberLoginToken" and "Salt" to their original VARCHAR length to avoid problems with invalidated hashes due to shorter field length

Browse Source 
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@114748 467b73ca-7a2a-4603-9d3b-597d59a354a9
This commit is contained in:
Ingo Schommer 2010-12-09 08:17:35 +00:00
parent 674d8e0f4a
commit f61a307486
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
security/Member.php
View File

@ -11,18 +11,18 @@ class Member extends DataObject {
'Surname' => 'Varchar', 'Surname' => 'Varchar',
'Email' => 'Varchar', 'Email' => 'Varchar',
'Password' => 'Varchar(160)', 'Password' => 'Varchar(160)',
'RememberLoginToken' => 'Varchar(40)', 'RememberLoginToken' => 'Varchar(50)',
'NumVisit' => 'Int', 'NumVisit' => 'Int',
'LastVisited' => 'SS_Datetime', 'LastVisited' => 'SS_Datetime',
'Bounced' => 'Boolean', // Note: This does not seem to be used anywhere. 'Bounced' => 'Boolean', // Note: This does not seem to be used anywhere.
'AutoLoginHash' => 'Varchar(40)', 'AutoLoginHash' => 'Varchar(50)',
'AutoLoginExpired' => 'SS_Datetime', 'AutoLoginExpired' => 'SS_Datetime',
// This is an arbitrary code pointing to a PasswordEncryptor instance, // This is an arbitrary code pointing to a PasswordEncryptor instance,
// not an actual encryption algorithm. // not an actual encryption algorithm.
// Warning: Never change this field after its the first password hashing without // Warning: Never change this field after its the first password hashing without
// providing a new cleartext password as well. // providing a new cleartext password as well.
'PasswordEncryption' => "Varchar(50)", 'PasswordEncryption' => "Varchar(50)",
'Salt' => 'Varchar(40)', 'Salt' => 'Varchar(50)',
'PasswordExpiry' => 'Date', 'PasswordExpiry' => 'Date',
'LockedOutUntil' => 'SS_Datetime', 'LockedOutUntil' => 'SS_Datetime',
'Locale' => 'Varchar(6)', 'Locale' => 'Varchar(6)',