Log of /drupal/scripts/password-hash.sh

---

Revision 1.6 - (view) (download) (as text) (annotate) - [select for diffs]
Thu Feb 26 07:30:29 2009 UTC (9 months ago) by webchick
Branch: MAIN
CVS Tags: DRUPAL-7-0-UNSTABLE-10, DRUPAL-7-0-UNSTABLE-6, DRUPAL-7-0-UNSTABLE-7, DRUPAL-7-0-UNSTABLE-8, DRUPAL-7-0-UNSTABLE-9, HEAD
Changes since 1.5: +2 -2 lines
Diff to previous 1.5

Roll-back of users -> user table name change in #330983: Broken pgsql is no fun.

---

Revision 1.5 - (view) (download) (as text) (annotate) - [select for diffs]
Wed Feb 18 15:19:57 2009 UTC (9 months, 1 week ago) by webchick
Branch: MAIN
Changes since 1.4: +2 -2 lines
Diff to previous 1.4

#330983 by recidive and boombatower: Rename users/users_roles tables to user/user_role for consistency.

---

Revision 1.4 - (view) (download) (as text) (annotate) - [select for diffs]
Tue Jan 13 22:39:11 2009 UTC (10 months, 1 week ago) by dries
Branch: MAIN
CVS Tags: DRUPAL-7-0-UNSTABLE-4, DRUPAL-7-0-UNSTABLE-5
Changes since 1.3: +2 -2 lines
Diff to previous 1.3

- Patch #358006 by gcopenhaver: fixed spelling errors.

---

Revision 1.3 - (view) (download) (as text) (annotate) - [select for diffs]
Sat Dec 20 18:24:41 2008 UTC (11 months ago) by dries
Branch: MAIN
Changes since 1.2: +2 -2 lines
Diff to previous 1.2

- Patch #349504 by keith.smith: clean up sentence spacing in code comments.

---

Revision 1.2 - (view) (download) (as text) (annotate) - [select for diffs]
Sat Sep 20 20:22:25 2008 UTC (14 months ago) by webchick
Branch: MAIN
CVS Tags: DRUPAL-7-0-UNSTABLE-1, DRUPAL-7-0-UNSTABLE-2, DRUPAL-7-0-UNSTABLE-3
Changes since 1.1: +5 -3 lines
Diff to previous 1.1

#259623 by dopry and Damien Tournoud: Convert includes/requires to use absolute paths.

---

Revision 1.1 - (view) (download) (as text) (annotate) - [select for diffs]
Mon Mar 31 20:50:05 2008 UTC (19 months, 3 weeks ago) by dries
Branch: MAIN

- Patch #29706 by pwolanin, solardiz, et al: more secure password hashing.

  This is a big and important patch for Drupal's security.  We are switching
  to much stronger password hashes that are also compatible with the Portable
  PHP password hashing framework.

  The new password hashes defeat a number of attacks, including:

  - The ability to try candidate passwords against multiple hashes at once.
  - The ability to use pre-hashed lists of candidate passwords.
  - The ability to determine whether two users have the same (or different)
    password without actually having to guess one of the passwords.

  Also implemented a pluggable password hashing API (similar to how an alternate
  cache mechanism can be used) to allow developers to readily substitute an
  alternative hashing and authentication scheme.

  Thanks all!