Passwords not encrypting

Discussion regarding Joomla! 2.5 security issues.

Moderators: Bernard T, mandville, fcoulter, PhilD, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Locked
WouterJ
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Wed Jan 28, 2015 8:00 am

Passwords not encrypting

Post by WouterJ » Wed Jan 28, 2015 10:20 am

Good day,

I am using joomla 2.5.16. And community builder 1.9.1
It has worked fine for a long time, until recently when I removed and added some fields to the registration form. Now when people register the password is not encrypted and just stored as plain text on the db. These new users are then unable to login.

However if they do a request for a new password, the new password gets encrypted and they can then log in. Its very strange. Some of the older users passwords has also just been stored as plain text, but the majority is still encrypted.

Is there a setting that I am missing somewhere?

Thanks

User avatar
mandville
Joomla! Master
Joomla! Master
Posts: 14799
Joined: Mon Mar 20, 2006 1:56 am
Location: The Girly Side of Joomla in Sussex

Re: Passwords not encrypting

Post by mandville » Wed Jan 28, 2015 12:32 pm

you are missing that your joomla is out of date and vulnerable. your CB is out of date.
update those and the rest of your extensions.
HU2HY- Poor questions = Poor answer
Un requested Help PM's will be reported, added to the foe list and possibly just deleted
{VEL Team Leader}{TM Auditor }{ Showcase & Security forums Moderator}

WouterJ
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Wed Jan 28, 2015 8:00 am

Re: Passwords not encrypting

Post by WouterJ » Wed Jan 28, 2015 1:00 pm

mandville wrote:you are missing that your joomla is out of date and vulnerable. your CB is out of date.
update those and the rest of your extensions.
Thanks for your reply.
I have updaded to the latest joomla. 2.5.28, tested it and still have me the same issue.
Then updated community builder to 2.05 and after uploading it gave me this error:

1064 - An error has occurred. You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 3 SQL=UPDATE el5sc_menu SET lft = lft + 2 WHERE lft >

And now the home page just gives a 1064 error.

Reinstalling CB 2.05 gave no installation errors but site is still broken.

Update:
If I disable the Community Builder Login module the site "works" again. But obviously I need this module to work.


Locked

Return to “Security in Joomla! 2.5”