Topic: Password encryption

Hello,

In my frontaccounting system has made some changes for user password encryption, related on ISO 27000.

I like to share mi code to be included in new versions of frontaccounting system.

Can I do? if it's posible.

cleal

cleal

Re: Password encryption

Upload changes and before and after screenshots if necessary somewhere and place link here.

Re: Password encryption

Hi, you can get code with this link.

https://www.dropbox.com/s/1nz03kcju60qdny/encrypt_password_fa.zip?dl=0

readme file included.

Post's attachments

encrypt_password_fa.zip 58 kb, 5 downloads since 2020-08-15 

You don't have the permssions to download the attachments of this post.
cleal

Re: Password encryption

Please note that this mod can only be applied in FA 2.5 as older versions of PHP do not have these encryption methods as the function password_hash uses BCRYPT.

For those who wish to use this functionality in PHP 5.3.7+ till < 5.5.0, refer the backward port function at:
https://github.com/ircmaxell/password_compat
and include the file password.php before usage.

5 (edited by cleal 08/15/2020 02:36:13 am)

Re: Password encryption

I am using FA 2.4.8 and PHP 7.4.5.

Regards.

cleal

Re: Password encryption

No wonder! PHP version 5.5.0 onwards the function password_hash has been available.

Re: Password encryption

I think this encryption improve FA security.

cleal

Re: Password encryption

That is why the password.php can be bundled into FA in the next version and make it into a separate extension for the current one. Note that the standard Charts will then be unusable until suitably modified.

Re: Password encryption

Thank you, Regards

cleal