Page 1 of 1

Switched to password_hash

Posted: Sun May 04, 2014 03:15 UTC
by thekabal
I've committed the changes to switch the underlying password hashing process from phppass to the native php function password_hash, on PHP 5.5+.

On versions below 5.5, but above or equal to 5.3.7, it will use the vendor/ircmaxell/password-compat library, which is the userspace equivalent of the same process as password_hash.

It automatically detects the lack of the function, and switches to the vendor library.

This also removes our use of adodb's sessions, another step towards our switch to PDO.