EE Plugin does not generate correct encrypted password

Discussion in 'Integration' started by markpeach59, Jan 7, 2009.

  1. markpeach59

    markpeach59 New Member

    Joined:
    Jan 5, 2009
    Messages:
    2
    I have a newly installed EE 1.6.6 and amember installed. Amember is creating a EE members account on amember signup - but the encrypted SHA1 password is wrong and I cannot login directly to EE. If I goto into EE directly as admin and reset the password to the correct value the encrypted string is different from the one that Amember inserted. - Help!

    Have logged a support ticket - but has anyone else experienced this and know what the issue is?

    Really need to get this going.

    Many Thanks

    Mark
  2. markpeach59

    markpeach59 New Member

    Joined:
    Jan 5, 2009
    Messages:
    2
    Think I have solved it.

    The core.sha1.php in EE 1.6 to 1.6.6 is no longer correct and out of date.
    I wrote a couple of lines of php to include the file and write out the sha1 hash of a known string using its function encode_hash and it was wrong.

    After a couple of hours and reading the header text in the core.sha1.php it dawned on me that the function encode_hash is wrong and i was not doing anything silly.

    EE does not use it and calls the php function sha1() directly somewhere.

    So I edited ee.inc.php and replaced the call to encode_hash (defined in core.sha1.php) with a call to sha1().

    I am running RHEL 5 Linux by the way.

    Encrypted password in EE is now created correctly from Amember when passed in.

Share This Page