2. PHPRunner General questions
  3. [SOLVED] Unable to select Password Hashing option on Registrations and Passwords
This topic is locked
[SOLVED]

Unable to select Password Hashing option on Registrations and Passwords

 		2/10/2025 10:41:54 AM
PHPRunner General questions
B
 bioman author

Hi,
I am trying to update an older project to make it more secure. There are a few changes I'd like to make, but one problem I'm seeing is that I can't click the option "Password Hashing". I have BCRYPT algorithm already checked (the radio box is filled), but I can't get the password hashing radio button to be clicked.

img alt

Is this a backwards compatibility issue, or is there something I'm doing wrong?

Please let me know how this can be fixed.

Thanks,
Brett
Peer Plaut 2/10/2025

I'm not sure about this. But I see a potential problem.
Do you have existig data? If so and those passwords are unencrypted and you try to encrypt the old passwords won't work.
I think the password field needs to be 255 characters.
Maybe that's why it's grayed out.
I attached a screen shot of the password field.
img alt

I don't know if this will work, but an idea would be to create a new password field, create a hashed password and insert that into all the records.
Then instruct your users to log on with the new password.

I'm sure there are better ways to do this...
~P.
B
 		bioman author 2/11/2025

Thanks Peer,
I think you may be correct that it is due to existing data. The passwords are encrypted but they appear to not be hashed. Perhaps your method is the best way to rectify this, but I'm wondering if there's a simpler method to use. Since the passwords are already encrypted, I don't know how I could generate hashed versions for current users. It seems like I'll need to ask them to re-register. Does this seem accurate to you? Is there a better way? Thanks,
Brett
B
 		bioman author 2/14/2025

The problem was that I had encryption enabled for the password field. Turning that off allowed me to turn on hashing. Thanks!