• Hi,
    I’m migrating users from Drupal 6.38
    In password.inc it searches for the 3 first letters of the hashed password.
    The options are $S$, $H$ or $P$.
    In any other case the login fails.

    I have a hashed password that starts with “9a0”, and the plugin didn’t work.
    However, when I changed the code of the plugin to simply compare the entered password after MD5, to the stored hashed password, it works.

    What’s the difference between using the _password_crypt function, and just using the MD5 function?
    the _password_crypt function demands that the 1st and 3rd chars are “$”.

    Could it be that older drupal versions (6) use different MD5 encoding?
    Is it safe to just compare passwords using PHP’s MD5 function?

    Thanks and great plugin

The topic ‘Drupal Version 6 ?’ is closed to new replies.