I've successfully gotten the db to store a newly created password in plain text (though this is an intermittent success as I don't want to keep it in plain text), however, the DISABLE_PASSWORD_CLEARING doesn't seem to be working as I cannot login to accounts with the unhashed password set regardless of the true/false setting for that.
In theory since the pw is now stored on the db in plain text and setting DISABLE_PASSWORD_CLEARING to true should compare the pw as plain text, now ONLY the non-hashed passwords should be logging in, correct?
Not sure why this simple set of mods is only working halfway and screwing up on the eaiser part (not zapping the pw)
|