Browse Source

Passwords are now encrypted using SHA512

clement 2 years ago
parent
commit
31a9f60494
1 changed files with 6 additions and 1 deletions
  1. 6 1
      src/models/user.php

+ 6 - 1
src/models/user.php

@@ -79,7 +79,12 @@ function change_password($current_password, $new_passwd) {
     if (!$ldap_bind) {
         return array(false, "Wrong current password");
     }
-    if (!ldap_exop_passwd($ldapconn, $dn, "",$new_passwd)) {
+
+    $salt = random_bytes(4);
+    $hash = "{SSHA512}" . base64_encode(pack("H*", hash('sha512', $new_passwd . $salt)) .$salt);
+    $entry["userPassword"] = $hash;
+
+    if (! ldap_mod_replace($ldapconn, $dn, $entry)) {
         return array(false, "A problem occured, contact admins");
     }