Hello!
I was doing a test.
rows_password = db(db.thist_password.usrid ==
auth.user_id).select(db.thist_password.password)
for j in rows_password:
#Get digest_alg salt, hash and original hash
(digest_alg, salt, save_hash) = j.password.split('$')
#Encrypt password
hash_password =
str(CRYPT(digest_alg=digest_alg,key=new_password,salt=salt)('test')[0])
(digest_alg, salt, new_hash) = hash_password.split('$')
if new_hash == save_hash:
form.errors.new_password = ('You can't repeat password')
break
But they are different
save_hash: 3e7d5266c03b978652b572be1e781c1ec0c985e6
new_hash: 33c3e0c2606b92fadf1f7aac07f77981f5f254bd salt: b5e76116485249e1
digest_alg: pbkdf2(1000,20,sha512)
save_hash: 0faac8814c1d26f1456a736634b1666320a19753
new_hash: 18a42ab5ab333ab7e21eb7e58591dd5c62885d60 salt: 936f3f68de018365
digest_alg: pbkdf2(1000,20,sha512)
save_hash: e90398ceeaf18950bc04229fe3b2e73dc16f9896
new_hash: d9ca6c9d67702112b2ca5d3d344bab0aaadde276 salt: 98a1d6f146b1815b
digest_alg: pbkdf2(1000,20,sha512)
Anybody have any idea what is wrong?
Regards.
--
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
---
You received this message because you are subscribed to the Google Groups
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/web2py/b91c9992-61c6-43be-bfee-2a07b6f199d3n%40googlegroups.com.