summaryrefslogtreecommitdiff
path: root/data
diff options
context:
space:
mode:
authorYorhel <git@yorhel.nl>2015-11-01 10:37:56 +0100
committerYorhel <git@yorhel.nl>2015-11-01 10:38:43 +0100
commit3de8d24697511fe324cae2526eb65d6aafb5968b (patch)
treeb34f6a3b91352d9f753d9d3e3ae0e1a93acc758c /data
parent4b1807a58912ff0b4542063071e072ccf53fd1bd (diff)
Removed support for sha256-hashed passwords
They had to be deleted from the database at some point, otherwise we still have thousands of easily-cracked password hashes in the database. Note that I could have opted to use scrypt on top of the sha256 hashes so the passwords would remain secure without needing to reset everything, but doing that after one year of switching to scrypt is likely not worth it. Everyone who still actively uses his account has already been converted to scrypt, everyone else should just reset their password whevener they decide to come back.
Diffstat (limited to 'data')
-rw-r--r--data/config_example.pl5
-rw-r--r--data/global.pl3
2 files changed, 3 insertions, 5 deletions
diff --git a/data/config_example.pl b/data/config_example.pl
index b1e405ce..96f003fc 100644
--- a/data/config_example.pl
+++ b/data/config_example.pl
@@ -17,9 +17,8 @@ package VNDB;
%S,
url => 'http://your.site.root/',
url_static => 'http://your.static.site.root/',
- global_salt => '<some long unique string>',
- form_salt => '<another unique string>',
- scrypt_salt => '<yet another unique string>',
+ form_salt => '<some unique string>',
+ scrypt_salt => '<another unique string>',
);
diff --git a/data/global.pl b/data/global.pl
index 4fefee29..1e3f90dc 100644
--- a/data/global.pl
+++ b/data/global.pl
@@ -21,8 +21,7 @@ our %S;
url => 'http://vndb.org', # Only used by Multi, web pages infer their own address
url_static => 'http://s.vndb.org',
skin_default => 'angel',
- global_salt => 'any-private-string-here',
- form_salt => 'a-different-private-string-here',
+ form_salt => 'a-private-string-here',
scrypt_args => [ 65536, 8, 1 ], # N, r, p
scrypt_salt => 'another-random-string',
regen_static => 0,