CVS log for ports/www/ikiwiki/files/Attic/patch-IkiWiki-Plugin-passwordauth.pm
![[BACK]](/gifs/back.gif){kind=small}
Up to [FreeBSD] / ports / www / ikiwiki / files
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
Revision 1.2
Sun Jun 1 21:13:54 2008 UTC (3 years, 8 months ago) by brix
Branches: MAIN
CVS tags: HEAD
FILE REMOVED
Changes since revision 1.1: +0 -0 lines
Update to version 2.48 (security update). If password based logins is enabled in ikiwiki, those passwords were until this release stored in cleartext in the userdb. To guard against exposing users' passwords, ikiwiki now use strong (blowfish) hashes for storing passwords. To hash existing passwords, update to this version and run the following command for each of your ikiwiki src dirs: ikiwiki-transition hashpassword /path/to/your/wiki/srcdir Approved by: erwin (mentor, implicit) Security: http://www.vuxml.org/freebsd/90db9983-2f53-11dd-a0d8-0016d325a0ed.html
Revision 1.1: download - view: text, markup, annotated - select for diffs
Sat May 31 10:13:13 2008 UTC (3 years, 8 months ago) by brix
Branches: MAIN
CVS tags: RELEASE_5_EOL
Fix empty password security hole, which affects wikis with both password and OpenID login enabled. Submitted by: Joey Hess <joeyh at debian.org> (IkiWiki author) Approved by: erwin (mentor, implicit) Security: http://www.vuxml.org/freebsd/09066828-2ef1-11dd-a0d8-0016d325a0ed.html