DX Auth 1.0.6 (Authentication library)

[eluser]Xeoncross[/eluser]
::BUG::

There is a bug with the default password of "hello" for the two user accounts. Depending on what OS and PHP version you have the computed crypt() and md5() hash string will be different. I just installed the system on a C2Q running WinXP and PHP 5.2.8 and it came up with a different hash so I couldn't loginto the admin account. So I dug though the system code and found out how the system makes password hashes and created a function that will generate a password for the admin account.

Code:

function change_password($username='admin', $new_password='hello') {
        
        //Load user lib
        $this->load->model('dx_auth/users', 'users');
        
        //Try to get the user -if found
        if (($row = $this->users->get_user_by_username($username)) && $row->num_rows()) {
            
            $encode_pw        = $this->dx_auth->_encode($new_password);
            $crypt_pw        = crypt($encode_pw);
            
            print 'You gave the password: <b>'. $new_password. '</b><br />';
            print 'Password hash for database row: <b>'. $crypt_pw. '</b><br />';
            
            /* How Register() checks the password...
            $hash            = crypt($encode_pw, $crypt_pw); //from row created above
            
            if ($hash === $crypt_pw) {
                print 'They match.';
            }
            */
            
        } else {
            print 'Username not found';
        }
        
    }

If you pass this function a username and a temp password (like "hello") it will make a hash that works on your system and then you can insert that into the database row instead of the default hash in the SQL file.

Then delete this function (or mark as private) so that it can't be run any longer).