• I had a version 4 of wordpress with keys encrypted with md5, the user table served as user control of some applications, when doing the update these keys were updated with the new encryption system of wordpress 5, fortunately I have the backup but I need some way that when new users register they also record their passwords in md5, some code, plugin or any suggestion

Viewing 9 replies - 1 through 9 (of 9 total)
  • no, you don’t need your passwords in md5 for security reasons.
    just WP handle the authentication as you originally planned

    Moderator bcworkz

    (@bcworkz)

    How are these other apps validating WP user passwords? If they hit the DB table directly, that needs to change. That’s also possibly a security vulnerability. If they go through WP somehow, it shouldn’t matter since WP knows how to validate.

    Thread Starter joselgz

    (@joselgz)

    Yes I understand, but at the moment the applications unfortunately use md5, I only need to be able to generate the keys in md5 of the wordpress users in a separate field

    Moderator bcworkz

    (@bcworkz)

    You need a password plaintext source, it cannot be determined from a hash. Then use md5().
    https://www.php.net/manual/en/function.md5.php

    Thread Starter joselgz

    (@joselgz)

    Yes I know I need a plain text to perform the conversion, but I can capture the plain text of the wordpress user password and apply md5 to it

    Thread Starter joselgz

    (@joselgz)

    I would like you to guide me a bit since I am not an expert in programming, my work is more than everything to coordinate and manage

    Moderator bcworkz

    (@bcworkz)

    I’m not going to code everything for you, but if you’re willing to make your own best effort, I’m willing to help you resolve any problems you encounter.

    How will these apps know where to find this MD5 version of the password? Something needs to change on their end, right? If so, why not have them ask WP to validate the password for them? With two different password hashes, it complicates things a bit when users change their password. Not a huge deal, but it’s an argument for having WP validate on the app’s behalf.

    Two hashes of the same plaintext is a form of redundant data. I despise redundant data 😉

    Thread Starter joselgz

    (@joselgz)

    It is not the support that I expected from the forum, rewrite the authentication code of the applications, it will be something long but in the future it had to be done and it is time

    Moderator bcworkz

    (@bcworkz)

    This is not the “Get Coding Done for Free” forums. What support is provided is through the generosity of volunteers, who are free to provide as much or as little support as they desire. If your need is beyond what volunteers wish to provide, I recommend hiring knowledgeable coders at resources like https://jobs.wordpress.net/ or https://jetpack.pro/

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Create Password’ is closed to new replies.