Topic: Password security has recently been upgraded. Please enter your password again.

[Ardii]

I have a problem with password of user from the last converting that i did.
I convert vbulletin 3.8.5 to smf RC5 , everything has go okay in converting but the problem is when I go to login with my old username and password ,shows me this : Password security has recently been upgraded. Please enter your password again.

What to do , have anyone any answer how to solve this problem?

[Aleksi "Lex" Kilpinen]

You do what it says, and enter the same password once more - and it should be OK from there on

[Ardii]

I tried this and I try now again but it doesn't works .

[Aleksi "Lex" Kilpinen]

Odd - It should work if the password is correct. Sadly I know nothing of this converter, so I'm probably not much help beyond my last reply.

[Oldiesmann]

It should work fine if you enter the same password a second time. You're saying it just gives you the same page again if you re-enter your password?

[TE]

there are at least two "known" bugs (one was tracked with id 4587, I would have reported the other one but my converter related bug reports have been ignored for a long time, thus I gave up on reporting more)

Bugs:
1) LogInOut.php

Code: [Select]

$other_passwords[] = md5(md5($_POST['passwrd']) . $user_settings['password_salt']);there is a missing stripslashes(); for the password_salt.

2) the password salt in vBulletin is varchar32, therefore the salt column in SMF needs to be changed by the converter (see 4587)

[digitalmikey]

there are at least two "known" bugs (one was tracked with id 4587, I would have reported the other one but my converter related bug reports have been ignored for a long time, thus I gave up on reporting more)

Bugs:
1) LogInOut.php

Code: [Select]

$other_passwords[] = md5(md5($_POST['passwrd']) . $user_settings['password_salt']);there is a missing stripslashes(); for the password_salt.

2) the password salt in vBulletin is varchar32, therefore the salt column in SMF needs to be changed by the converter (see 4587)

I wonder if this will ever be addressed. I really need for my users NOT to have to change their password just because I switched to SMF.