I've been coding since the late 70s, so that's not the holdback.
Yeah, a rehash won't work at import time because you don't know the old password, only it's hash. And I know I can do it at first login, if it validates against the old has then rehash it and save. This is how Xenforo handles things like handling VBulletin imported users.
Unfortunately, the additional coding to add this to the framework I'm dealing with is simply not within the client's budget. And they are okay with users having to reset their passwords.
|