Trying to use sha1 and encyption key together on post

[eluser]Tim Brownlaw[/eluser]
Just as a suggestion...

With having existing Members registered with their passwords using Encryption Method A (EC-A) , and you want to switch them over to Encryption Method B (EC-B) you could look at doing this when they login... ie when they are providing their typed in ( non encrypted ) password...

1. Test the password using EC-A...
If that Passes... Take their Password they offered and encrypt and save it using EC-B
2. If it Fails the EC-A Test. perform the EC-B test ( they may have already changed their password ).
Else - "thanks for coming but I aint letting you in...."

And they'll change over silently behind the scenes as each member logs in...

For those that never login... well they aint using the system anyways...

It does depend on getting everyone to log in, without creating any potential mass hysteria regarding - "Hey your passwords aint that secure on our system, can you please log in to change them....... ".

Just something to help get the brain juices flowing on that part of it.

Cheers