Page 1 of 1

Re: Salted passwords?

PostPosted: Fri Apr 05, 2013 1:38 pm
by hakko
Nope, the password is not stored anymore, instead function(function(password)) is stored. So you'd have to run millions of passwords through function(function(...)) until you'd find a match of what you have in subsonic.script. It's security over convenience.

Re: Salted passwords?

PostPosted: Fri Apr 05, 2013 4:35 pm
by daneren2005
Well if you have access to the db, you should be able to manually set the password to whatever they want it to be. Just take their password and run it through the salt + encryption and update it to be the result.