Skip to content
Snippets Groups Projects
  1. Aug 15, 2017
  2. May 25, 2017
  3. May 24, 2017
  4. May 21, 2017
  5. May 19, 2017
  6. May 18, 2017
  7. May 15, 2017
  8. May 13, 2017
  9. May 12, 2017
  10. Apr 24, 2017
  11. Apr 19, 2017
    • Max-Julian Pogner's avatar
      PassHash.class.php: in case of brcrypt, use the most recent variant $2y$ · dd865c4c
      Max-Julian Pogner authored
      This change breaks compatibility with php 5.3.7, but a standing
      requirement for at least php 5.6 is declared in composer.json.
      
      If the php documentation is to be believed, this change increases
      security against pass-the-hash type attacks. (I do not have the knowledge
      to assess the security differences between $2a$ and $2y$).
      
      As a Sidenote: htpasswd shipped with apache2 2.4.10 (and probably,
      other versions), when used with the -B (=bcrypt) option, produces hashes
      marked with $2y$.
      
      Nonewithstanding the actual support or non-support of $2a$ by the
      apache2 'AuthUserFile' directive, the apache 2.4 documentation only
      asserts support for the $2y$ bcrypt variant.
      Therefore, this commit would make it possible for dokuwiki and apache2
      basic authentication to share the same password file, in the case when
      bcrypt is used.
      dd865c4c
    • David Surroca's avatar
      translation update · 6475ad44
      David Surroca authored
      6475ad44
  12. Apr 05, 2017
  13. Apr 04, 2017
  14. Mar 31, 2017
Loading