[Koha-bugs] [Bug 12367] Import patrons still says "MD5 hash"

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Thu Jun 5 10:02:30 CEST 2014


http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12367

--- Comment #1 from Magnus Enger <magnus at enger.priv.no> ---
Created attachment 28671
  -->
http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=28671&action=edit
Bug 12367 - Import patrons still says "MD5 hash"

The password hashing algorithm was changed in Bug 9611,
but on Tools > Import patrons, in the text on the right
hand side, it still says:

"'password' should be stored in plaintext, and will be
converted to a MD5 hash"

This has no practical effect, of course, but to someone
evaluating Koha it might give the false impression that
password security is lower than it really is.

To test:
- Look at Tools > Import patrons and verify that it says
  "a MD5 hash"
- Also look at the help page and see the same text
- Apply the patch
- Check that both the tool and the help now says
  "a Bcrypt hash"

I'll do a patch for the docs too.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list