From 14f6017a5b84d70320bde9d6e074ea8ac948a85e Mon Sep 17 00:00:00 2001 From: Arun Persaud Date: Sat, 22 Sep 2012 12:38:58 -0700 Subject: updated to better password hash: use crypt instead of md5 the upgrade will be done automatically when a user logs in, password recovery is still based on md5, but that should be OK, since it's a random generated password anyway --- include/db.php | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'include/db.php') diff --git a/include/db.php b/include/db.php index 1f02169..6942cd6 100644 --- a/include/db.php +++ b/include/db.php @@ -30,7 +30,7 @@ if(!isset($HOST)) function DB_open() { - $version_needed = 4; + $version_needed = 5; global $DB,$DB_user,$DB_host,$DB_database,$DB_password; $DB = @mysql_connect($DB_host,$DB_user, $DB_password); @@ -951,6 +951,12 @@ function DB_set_recovery_password($user,$newpw) return; } +function DB_delete_recovery_passwords($userid) +{ + DB_query("DELETE FROM Recovery WHERE user_id=".DB_quote_smart($userid)); + return; +} + function DB_get_card_name($card) { if($card==0) -- cgit v1.2.3-18-g5258