mirror/opensourcepos
1
0 Fork 0
mirror of https://github.com/opensourcepos/opensourcepos.git synced 2026-10-24 00:58:37 -04:00
Code Issues Packages Projects Releases Wiki Activity

Upgrade old MD5 password hashing (#822)

Browse Source
This commit is contained in:
jekkos committed 2016-09-01 19:12:08 +02:00
1 parent ce2c83b3f9
commit 35f9904dbe
3 files changed
+25 -5
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

application/models/Employee.php
+18 -3
View File
@@ -298,14 +298,29 @@ class Employee extends Person
*/
public function login($username, $password)
{
$query = $this->db->get_where('employees', array('username' => $username, 'password' => md5($password), 'deleted' => 0), 1);
$query = $this->db->get_where('employees', array('username' => $username, 'deleted' => 0), 1);
if($query->num_rows() == 1)
{
$row = $query->row();
$this->session->set_userdata('person_id', $row->person_id);
return TRUE;
// compare passwords depending on the hash version
if ($row->hash_version == 1 && $row->password == md5($password))
{
$this->db->where('person_id', $row->person_id);
$this->session->set_userdata('person_id', $row->person_id);
$password_hash = password_hash($password, PASSWORD_DEFAULT);
return $this->db->update('employees', array('hash_version' => 2, 'password' => $password_hash));
}
else if ($row->hash_version == 2 && password_verify($password, $row->password))
{
$this->session->set_userdata('person_id', $row->person_id);
return TRUE;
}
}
return FALSE;