File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
http://aspose.com/file-tools
The moose likes JForum and the fly likes Disabling Password Encryption Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of OCA/OCP Java SE 7 Programmer I & II Study Guide this week in the OCPJP forum!
JavaRanch » Java Forums » Products » JForum
Bookmark "Disabling Password Encryption" Watch "Disabling Password Encryption" New topic
Author

Disabling Password Encryption

Migrated From Jforum.net
Ranch Hand

Joined: Apr 22, 2012
Posts: 17424
Hi all,

Is there any easy way to avoid jForum not encrypting user's passwords. Is there any option in configuration/properties file where I can change it.

Currently it is using MD5 encryption, correct me if I am wrong.

Many Thanks,

Iqbal



[originally posted on jforum.net by iqbal]
Migrated From Jforum.net
Ranch Hand

Joined: Apr 22, 2012
Posts: 17424
Yes, MD5.
There are no option.

P.S. Why u need it???
[originally posted on jforum.net by VVD]
Migrated From Jforum.net
Ranch Hand

Joined: Apr 22, 2012
Posts: 17424
Well, because I wanted to make a simple class which will add users to jforum_users at the same time when they register in my webapp, this way I can use sso and display their name in jForum rather thn the dummy Annonymous name being displayed.

I use in one of my webapp SHA1, but havent seen any significance to it.


Regards,


Iqbal
[originally posted on jforum.net by iqbal]
Migrated From Jforum.net
Ranch Hand

Joined: Apr 22, 2012
Posts: 17424
I already change MD5 to SHA512 (in forum) and use same table for users in forum and in my app.
I can to post diff file, and my SHA512 encription util functions.
[originally posted on jforum.net by VVD]
Migrated From Jforum.net
Ranch Hand

Joined: Apr 22, 2012
Posts: 17424
Oh Thats great, i probably will end up configuring sso to some advance level but still struggling.
[originally posted on jforum.net by iqbal]
Migrated From Jforum.net
Ranch Hand

Joined: Apr 22, 2012
Posts: 17424
Also u must increase user_password column to 128 bytes in table jforum_users and run SQL script:
UPDATE jforum_users SET user_password=c7ad44cbad762a5da0a452f9e854fdc1e0e7a52a38015f23f3eab1d80b931dd472634dfac71cd34ebc35d16ab7fb8a90c81f975113d6c7538dc69dd8de9077ec WHERE user_id=2

Then u can login as admin with password admin.
[originally posted on jforum.net by VVD]
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: Disabling Password Encryption