syzlmr

Re: Usersの暗号化方式は？

1. /concrete/models/user.php 行 208-210
public function encryptPassword($uPassword, $salt = PASSWORD_SALT) {
return md5($uPassword . ':' . $salt);
}
PASSWORD_SALTは/config/site.phpの中に保存します


2. /concrete/controllers/install.php 行 315
define('PASSWORD_SALT', $salt);

3. /concrete/controllers/install.php 行 256
$salt = ( defined('MANUAL_PASSWORD_SALT') ) ? MANUAL_PASSWORD_SALT : $vh->getString(64);

4. /concrete/helpers/validation/identifier.php 行 72-73
public function getString($length = 12) {
$str = str_repeat($this->letters, 10);
$hash = substr(str_shuffle($str), 0, $length);
return $hash;
}

4. /concrete/helpers/validation/identifier.php 行 23
private $letters = 'abcefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890';


TEST

<?php
echo md5('暗号'.':'.PASSWORD_SALT);
?>

OKです