Re: [PATCH] Implement hashed passwords for SQLite3 storage

2013-11-02 Thread Sergio Durigan Junior
On Saturday, November 02 2013, Tomasz Sterna wrote: > The easiest would be to make a GitHub fork to ba able to create > GitHub pull requests. Sorry, GitHub uses proprietary software as its backend, and its terms of service are not very respectful IMO. I have an account there, but I don't use it

Re: [PATCH] Implement hashed passwords for SQLite3 storage

2013-11-02 Thread Tomasz Sterna
Dnia 2013-10-31, czw o godzinie 16:44 -0200, Sergio Durigan Junior pisze: > I'll set up a git repo and publish here, so if anyone is interested > it'll be possible to follow the development. The easiest would be to make a GitHub fork to ba able to create GitHub pull requests. -- Tomasz Sterna

Re: [PATCH] Implement hashed passwords for SQLite3 storage

2013-10-31 Thread Sergio Durigan Junior
On Thursday, October 31 2013, Tomasz Sterna wrote: >> Eventually, I intend to start working on the libdbi integration (see >> ). Is anyone else >> working on this? Maybe we could join efforts :-). > > Noone that I know of. > It should be fairly eas

Re: [PATCH] Implement hashed passwords for SQLite3 storage

2013-10-31 Thread Tomasz Sterna
Dnia 2013-10-30, śro o godzinie 16:36 -0200, Sergio Durigan Junior pisze: > Wow, that was fast! Thanks a lot :-). Thank _you_. :-) > Eventually, I intend to start working on the libdbi integration (see > ). Is anyone else > working on this? Mayb

Re: [PATCH] Implement hashed passwords for SQLite3 storage

2013-10-30 Thread Sergio Durigan Junior
On Wednesday, October 30 2013, Tomasz Sterna wrote: > Dnia 2013-10-30, śro o godzinie 03:37 -0200, Sergio Durigan Junior > pisze: >> The patch is indeed a copy-and-paste of the code which adds this >> security in other backends. I also made a little cleanup in the >> "check_password" function of

Re: [PATCH] Implement hashed passwords for SQLite3 storage

2013-10-30 Thread Tomasz Sterna
Dnia 2013-10-30, śro o godzinie 03:37 -0200, Sergio Durigan Junior pisze: > The patch is indeed a copy-and-paste of the code which adds this > security in other backends. I also made a little cleanup in the > "check_password" function of the SQLite3 backend (obvious). I tested > the patch by crea

[PATCH] Implement hashed passwords for SQLite3 storage

2013-10-29 Thread Sergio Durigan Junior
Hi there, I'm a(n) (almost) happy Jabberd2 user :-). I say "almost" because unfortunately it lacks any kind of security for storing passwords when using the SQLite3 storage backend. While taking a look at your website and resources, I found this: