diff options
| author | Yorhel <git@yorhel.nl> | 2015-11-01 10:37:56 +0100 |
|---|---|---|
| committer | Yorhel <git@yorhel.nl> | 2015-11-01 10:38:43 +0100 |
| commit | 3de8d24697511fe324cae2526eb65d6aafb5968b (patch) | |
| tree | b34f6a3b91352d9f753d9d3e3ae0e1a93acc758c /data/global.pl | |
| parent | 4b1807a58912ff0b4542063071e072ccf53fd1bd (diff) | |
Removed support for sha256-hashed passwords
They had to be deleted from the database at some point, otherwise we
still have thousands of easily-cracked password hashes in the database.
Note that I could have opted to use scrypt on top of the sha256 hashes
so the passwords would remain secure without needing to reset
everything, but doing that after one year of switching to scrypt is
likely not worth it. Everyone who still actively uses his account has
already been converted to scrypt, everyone else should just reset their
password whevener they decide to come back.
Diffstat (limited to 'data/global.pl')
| -rw-r--r-- | data/global.pl | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/data/global.pl b/data/global.pl index 4fefee29..1e3f90dc 100644 --- a/data/global.pl +++ b/data/global.pl @@ -21,8 +21,7 @@ our %S; url => 'http://vndb.org', # Only used by Multi, web pages infer their own address url_static => 'http://s.vndb.org', skin_default => 'angel', - global_salt => 'any-private-string-here', - form_salt => 'a-different-private-string-here', + form_salt => 'a-private-string-here', scrypt_args => [ 65536, 8, 1 ], # N, r, p scrypt_salt => 'another-random-string', regen_static => 0, |