Oh no! Where's the JavaScript?
Your Web browser does not have JavaScript enabled or does not support JavaScript. Please enable JavaScript on your Web browser to properly view this Web site, or upgrade to a Web browser that does support JavaScript.
Not a member yet? Click here to register.
Forgot Password?

Is PHPFusion V8 already fully working with PHP8 + SHA3

Asked Modified Viewed 1,095 times
O
ozzWANTED
O
  • Member, joined since
  • Contributed 99 posts on the community forums.
  • Started 22 threads in the forums
  • Started this discussions
asked
Member

Hi,
Is PHPFusion V8 already fully working with PHP8.
Also when could we expect to change PHPFusion V8 password hash to SHA3. As security should be a headline of PHPFusion.

Thanks.
Edited by ozzWANTED on 22-03-2021 17:41,
0 replies

3 posts

R
Anonymous User
R
Anonymous User 367
  • Veteran Member, joined since
  • Contributed 939 posts on the community forums.
  • Started 2 threads in the forums
  • Answered 20 questions
answered
Veteran Member

No. For compatibility reasons, we cannot change database structure or authentication. Only v9 and newer...

PHP 8 is already supported. Read the news...

I have no plans with this version and there are few people in the development team... I don't have time at all to add more features to v8. New features = new bugs..
0 replies
O
ozzWANTED
O
  • Member, joined since
  • Contributed 99 posts on the community forums.
  • Started 22 threads in the forums
  • Started this discussions
answered
Member

As mentioned we are interested to be partron/sponsors of PHPFusion when you will launch your Patreon account.
We have two main customers that runs on PHPFusion V6-V7-V8, as well as there are thousands of plugins there.
And security is #1 thing.
So you don't want to ruin your online security reputation in 1 day.
If you don't have time, can I and our CTO Marius do a pull request to your Fusion V8 repository - we already created this feature.

It check password hash length in LOGIN time, and if the password is old md5/sha1, and PHP version is 7.1 or above, it updates the DB hash to SHA3.
The only thing you need to do in your database is just update max-length of user_pass field, to fit sha3 hash. No other features are required.
And then in core replace the md5 with SHA3. That's it.
0 replies
R
Anonymous User
R
Anonymous User 367
  • Veteran Member, joined since
  • Contributed 939 posts on the community forums.
  • Started 2 threads in the forums
  • Answered 20 questions
answered
Veteran Member

Quote

there are thousands of plugins there

Almost all v7 addons are bad (If you are talking about addons here in MP.) .. but can be easily fixed to work on v9.

Quote

It check password hash length in LOGIN time, and if the password is old md5/sha1, and PHP version is 7.1 or above, it updates the DB hash to SHA3.

We can upgrade user_pass to support more characters. But problem is that v8 must work on PHP 5.6. If you have solution that can work on 5.6 as well, send PR and I merge it.

Also if you want to add any new features send PR.
0 replies

Labels

Statistics

  • Views 0 views
  • Posts 3 posts
  • Votes 0 votes
  • Topic users 2 members

2 participants

O
O
  • Member, joined since
  • Contributed 99 posts on the community forums.
  • Started 22 threads in the forums
  • Started this discussions
R
R
Anonymous User 367
  • Veteran Member, joined since
  • Contributed 939 posts on the community forums.
  • Started 2 threads in the forums
  • Answered 20 questions

Notifications

Track thread

You are not receiving notifications from this thread.

Related Questions

Not yet