[aur-dev] FS#17109: AUR passwords are not salted

[Denis Kobozev]

Here's a patch with a script to salt passwords in the database. It
assumes that there already a Salt field in the Users table. Hopefully
it will integrated with Linas's patches.

Linas, I think salted_hash() should not call md5() internally,
otherwise it's not very useful to the script. You can take a look at
the patch if I'm being ambiguous.

Best,
Denis.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Script-for-salting-passwords-in-the-database.patch
Type: text/x-patch
Size: 4530 bytes
Desc: not available
URL: <http://mailman.archlinux.org/pipermail/aur-dev/attachments/20100625/2351988d/attachment.bin>