Single Comment

I just recreated this account using email registration. The password is stored as a salted hash, and it is case sensitive. As long as I was allowing new passwords to be case sensitive, I decided to replace the unsalted hash the passwords have been stored as with salted hashes. The benefit of salted hashes is that when two users have the same password, the salted hashes of their passwords will still look different. So you won't be able to tell they are the same by looking at them. I am currently in the process of uploading and testing scripts that use the new password format. For backwards compatibility with the old passwords, the case insensitive unsalted passwords are still recognized. But if you change your password, even to the same one, it will be stored in the new manner. So far, I have done cvplogin.php, signup.php, registeruser.php, displayperson.php, and if this works, addcomment.php.