new authentication framework with stronger passwords and real salts - please proofread!

1 files changed, 7 insertions, 0 deletions

diff --git a/db/update.d/19_password_field.php b/db/update.d/19_password_field.php
new file mode 100644
index 00000000..85333f28
--- /dev/null
+++ b/db/update.d/19_password_field.php
@@ -0,0 +1,7 @@
+<?php
+// make the Passwort column in the User table longer to store more advanced hashes with salts
+$res = sql_select("DESCRIBE `User` `Passwort`");
+if ($res[0]['Type'] == 'varchar(40)') {
+	sql_query("ALTER TABLE `User` CHANGE `Passwort` `Passwort` VARCHAR(128) NULL");
+	$applied = true;
+}