Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Import external bcrypt plugin for password hashing #217

Merged
merged 1 commit into from
Feb 27, 2024
Merged

Commits on Feb 21, 2024

  1. Import external bcrypt plugin for password hashing

    It was noted in <#216> that
    our project template defaults to WordPress default hashing method for
    password, which is still in 2024 weak MD5. There has for a long time
    existed mu-plugin, which can be used to replace password hashing with
    bcrypt.
    
    This plugin hooks to WordPress core password handling functions, and
    overrides password checks so all obsolete MD5-hashed passwords will be
    converted to bcrypt (or whatever is in future the PHP default password
    hashing function).
    
    See source code for more documentation.
    
    Source:
    <https://raw.githubusercontent.com/roots/wp-password-bcrypt/master/wp-password-bcrypt.php>
    Original commit: <15f0d8919fb3731f79a0cf2fb47e1baecb86cb26>
    License: MIT
    Author: Roots
    Author URI: <https://roots.io>
    
    Closes: #216
    ypcs committed Feb 21, 2024
    Configuration menu
    Copy the full SHA
    24ffbac View commit details
    Browse the repository at this point in the history