Shopsys: Command shopsys:administrator:change-password did not hash password

Created on 1 Jun 2020  路  3Comments  路  Source: shopsys/shopsys

Hello, i used command shopsys:administrator:change-password and figure out password is saved to DB in plain format. Probably there is missing hashing function.

Expected result

Hashed password :))

Most helpful comment

Hi @ondrejbohac, this has been fixed in #1901.

All 3 comments

Hi @ondrejbohac you have to use security:encode-password command first. Then copy the hash into input of shopsys:administrator:change-password.

I agree with you to make the command more straightforward so I leave this issue opened.

EDIT: As this change will break backward compatibility it cannot be done until version 10 is released. Introducing a new command for this task would be confusing for other developers and I would rather avoid it.

Hello @s3tezsky, ok, I get it now :).
I am sorry if I missed any description somewhere, but if it missing I think it will be great to add it since this functionality could not be changed.

Hi @ondrejbohac, this has been fixed in #1901.

Was this page helpful?
0 / 5 - 0 ratings

Related issues

henzigo picture henzigo  路  4Comments

vitek-rostislav picture vitek-rostislav  路  5Comments

vitek-rostislav picture vitek-rostislav  路  4Comments

vitek-rostislav picture vitek-rostislav  路  4Comments

boris-brtan picture boris-brtan  路  4Comments