Quote:
Originally Posted by Marco van Herwaarden
Hmm what you COULD do:
- Check if the MD5 password matches
- If not encrypt the unencrypted password with SHA1, and check the password. If it is a match, re-hash the unencrypted password with MD5 and write to the database so the next attempt will match the normal MD5 hash vBulletin uses.
After some time most SHA1 hashed passwords should be gone.
|
That's actually the plan.
The only thing is, I'm not sure how to actually implement it.
Any ideas?