Changeset 400755
- Timestamp:
- 06/24/2011 08:04:08 AM (15 years ago)
- File:
-
- 1 edited
-
wp-http-digest/trunk/readme.txt (modified) (3 diffs)
Legend:
- Unmodified
- Added
- Removed
-
wp-http-digest/trunk/readme.txt
r400577 r400755 1 1 === wp-http-digest === 2 2 3 Contributors: monperrus 3 4 Requires at least: ? … … 16 17 17 18 This section describes how to install the plugin and get it working: 19 18 20 1. Upload `wp-http-digest.php` to the `/wp-content/plugins/` directory 19 1. Activate the plugin through the 'Plugins' menu in WordPress20 1. *Important* You are still logged-in with you administrator account, then go into your profile (top, right-hand side) and update your password21 2. Activate the plugin through the 'Plugins' menu in WordPress 22 3. *Important* You are still logged-in with you administrator account, then go into your profile (top, right-hand side) and update your password 21 23 22 24 *WARNING*: once you've installed the plugin, the previous passwords become invalid. If something goes wrong, you may have to: 25 23 26 1. recreate a new password for an existing administrator account, for instance using htdigest: 24 `$ htdigest -c digest-file wordpress username`25 `$ awk -F : '{print "HA1 for user "$1" is "$3}' digest-file`26 1. copy the HA1 in the database (table:wp_user, colum:user_pass), for instance with phpMyAdmin27 * `$ htdigest -c digest-file wordpress username` 28 * `$ awk -F : '{print "HA1 for user "$1" is "$3}' digest-file` 29 2. copy the HA1 in the database (table:wp_user, colum:user_pass), for instance with phpMyAdmin 27 30 28 31 29 32 == Frequently Asked Questions == 30 33 31 = I can not log in anymore = 34 #### I can not log in anymore 32 35 See the warning in section Installation 33 36 34 = Is this method secure? = 35 According to Wikipedia [http://en.wikipedia.org/wiki/Digest_access_authentication], although md5 is getting weak, there are no known attacks on HTTP Digest hash.37 #### Is this method secure? 38 According to Wikipedia <http://en.wikipedia.org/wiki/Digest_access_authentication>, although md5 is getting weak, there are no known attacks on HTTP Digest hash. 36 39 37 40 … … 39 42 40 43 = 20110623 = 41 First upload to http://wordpress.org/extend/plugins/44 First upload to <http://wordpress.org/extend/plugins/> 42 45 43 46 == Implementation == 44 47 45 The implementation could be more concise and beautiful if ./wp-includes/user.php would rely on wp_set_password instead of wp_hash_password (no action_profile_update and wp_new_user_notification required). See discussion and patch at [http://core.trac.wordpress.org/ticket/17830].48 The implementation could be more concise and beautiful if `./wp-includes/user.php` would rely on `wp_set_password` instead of `wp_hash_password` (no `action_profile_update` and `wp_new_user_notification` required). See discussion and patch at <http://core.trac.wordpress.org/ticket/17830>.
Note: See TracChangeset
for help on using the changeset viewer.