How to Remove Salt function in joomla 1.5

Your code modifications and patches you want to share with others.
Locked
User avatar
arjuninfo
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 113
Joined: Sat Aug 08, 2009 12:50 pm
Location: India ,chennai

How to Remove Salt function in joomla 1.5

Post by arjuninfo » Thu Oct 08, 2009 6:14 am

How to Remove Salt function in joomla 1.5


its very simple


root\joomla\libraries\joomla\user

helper.php

remove this code in line no 284


$salt = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";

To

$salt = '';
M.Arjun

User avatar
arjuninfo
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 113
Joined: Sat Aug 08, 2009 12:50 pm
Location: India ,chennai

Re: How to Remove Salt function in joomla 1.5

Post by arjuninfo » Thu Oct 08, 2009 6:19 am

Another thing goto

root\joomla\libraries\joomla\user

user.php (in line 400 to 410)

Replace

$salt = JUserHelper::genRandomPassword(32);
$crypt = JUserHelper::getCryptedPassword($array['password'], $salt);
$array['password'] = $crypt.':'.$salt;



To


$salt = JUserHelper::genRandomPassword(32);
$crypt = JUserHelper::getCryptedPassword($array['password'], $salt);
$array['password'] = $crypt;



And in line around 430 to 450

again change this line Replace


$salt = JUserHelper::genRandomPassword(32);
$crypt = JUserHelper::getCryptedPassword($array['password'], $salt);
$array['password'] = $crypt.':'.$salt;


To



$salt = JUserHelper::genRandomPassword(32);
$crypt = JUserHelper::getCryptedPassword($array['password'], $salt);
$array['password'] = $crypt;


------------------------------------------------------------------------------------
M.Arjun

User avatar
arjuninfo
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 113
Joined: Sat Aug 08, 2009 12:50 pm
Location: India ,chennai

Re: How to Remove Salt function in joomla 1.5

Post by arjuninfo » Thu Oct 08, 2009 6:25 am

look at this screenshot
You do not have the required permissions to view the files attached to this post.
M.Arjun

User avatar
mark_up
Joomla! Guru
Joomla! Guru
Posts: 849
Joined: Sun Oct 29, 2006 10:51 am
Location: Fiji
Contact:

Re: How to Remove Salt function in joomla 1.5

Post by mark_up » Thu Oct 08, 2009 6:31 am

A most informative post arjuninfo, thank you very much.

I wonder though, why would you want to do this? Why reduce the security that Joomla currently offers?
http://twitter.com/mark_up.
Opinions expressed are mine alone and don't necessarily represent the views of any organisation I am associated with.

User avatar
arjuninfo
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 113
Joined: Sat Aug 08, 2009 12:50 pm
Location: India ,chennai

Re: How to Remove Salt function in joomla 1.5

Post by arjuninfo » Thu Oct 08, 2009 6:40 am

GollumX wrote:A most informative post arjuninfo, thank you very much.

I wonder though, why would you want to do this? Why reduce the security that Joomla currently offers?

Please check this post ,,,,then u will know why i posted this topic ...

http://forum.joomla.org/viewtopic.php?f=304&t=448432
M.Arjun

User avatar
mark_up
Joomla! Guru
Joomla! Guru
Posts: 849
Joined: Sun Oct 29, 2006 10:51 am
Location: Fiji
Contact:

Re: How to Remove Salt function in joomla 1.5

Post by mark_up » Thu Oct 08, 2009 7:01 am

Thanks
http://twitter.com/mark_up.
Opinions expressed are mine alone and don't necessarily represent the views of any organisation I am associated with.

User avatar
selvaganeshj
Joomla! Apprentice
Joomla! Apprentice
Posts: 11
Joined: Fri Oct 09, 2009 8:58 am
Location: Chennai, Tamilnadu, India

Re: How to Remove Salt function in joomla 1.5

Post by selvaganeshj » Fri Oct 09, 2009 9:48 am

arjuninfo wrote:
GollumX wrote:A most informative post arjuninfo, thank you very much.

I wonder though, why would you want to do this? Why reduce the security that Joomla currently offers?

Please check this post ,,,,then u will know why i posted this topic ...

http://forum.joomla.org/viewtopic.php?f=304&t=448432
Hi Arjuninfo,

I saw the post which you linked here.
i think there is no need to remove the salt to add the old password functionalities.
we can use the JUserhelper calss to check the old password. :)
Best Regards,
SelvaG

User avatar
ooffick
Joomla! Master
Joomla! Master
Posts: 11392
Joined: Thu Jul 17, 2008 3:10 pm
Location: Ireland
Contact:

Re: How to Remove Salt function in joomla 1.5

Post by ooffick » Fri Oct 09, 2009 10:33 am

Mod Note: Moved to Core Hacks Forum
Olaf Offick - Global Moderator
learnskills.org


Locked

Return to “Core Hacks and Patches”