From db95fe6485f13c0041bbafbb0004b171cd9122e7 Mon Sep 17 00:00:00 2001
From: Jan-Philipp Litza <janphilipp@litza.de>
Date: Wed, 12 Dec 2012 02:31:54 +0100
Subject: new authentication framework with stronger passwords and real salts -
 please proofread!

---
 db/update.d/19_password_field.php | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 db/update.d/19_password_field.php

(limited to 'db')

diff --git a/db/update.d/19_password_field.php b/db/update.d/19_password_field.php
new file mode 100644
index 00000000..85333f28
--- /dev/null
+++ b/db/update.d/19_password_field.php
@@ -0,0 +1,7 @@
+<?php
+// make the Passwort column in the User table longer to store more advanced hashes with salts
+$res = sql_select("DESCRIBE `User` `Passwort`");
+if ($res[0]['Type'] == 'varchar(40)') {
+	sql_query("ALTER TABLE `User` CHANGE `Passwort` `Passwort` VARCHAR(128) NULL");
+	$applied = true;
+}
-- 
cgit v1.2.3-54-g00ecf