Timeline for Joomla user password to Drupal migration
Current License: CC BY-SA 4.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 26, 2022 at 11:06 | vote | accept | CommunityBot | ||
| Jul 26, 2022 at 11:06 | comment | added | user106319 | Alright. Thank you for your help! | |
| Jul 26, 2022 at 8:56 | comment | added | avpaderno♦ | Sending the email to reset their passwords could work, as long as the message is clear enough and users don't think somebody tried to reset their password. (In that case, they could not do anything.) | |
| Jul 26, 2022 at 8:50 | comment | added | user106319 | Hmm yes that's tough. Maybe it it useful to reset the passwords for all users and send them an email with the new password so they could reset it. I don't know if that's useful. | |
| Jul 26, 2022 at 8:40 | comment | added | avpaderno♦ | Keep also in mind that, from a password hash, you cannot get the password. Hashes are one-way functions: You don't return back. | |
| Jul 26, 2022 at 8:39 | comment | added | avpaderno♦ | The problem is that, if you do that on the Drupal side, you cannot know if the user who entered the username is the user who created the account. You cannot simply ask to the user who entered a username to enter a new password. You need also to verify that user knows the old password. If you just have a bcrypt hash, you cannot, from Drupal, except in the case a module can handle bcrypt hashes. | |
| Jul 26, 2022 at 8:00 | comment | added | user106319 | I have searched online for some information about it and I found a page where I think they state that Phpass will not be used in Joomla: Use Portable PHP Passwords. I think the easiest way is to tell users to change their password when they login the first time. | |
| Jul 26, 2022 at 7:47 | comment | added | avpaderno♦ | That is a bcrypt hash. Since JOOMLA is said to use Phpass password hashes, I would first check if JOOMLA allows to migrate from a bcrypt password hash to a Phpass password hash. If that is possible, though, it would be done when users log in. In that moment, once the users enter their password,the password would be verified, and then the password would be used to generate a Phpass password hash. | |
| Jul 26, 2022 at 7:41 | history | edited | avpaderno♦ | CC BY-SA 4.0 |
added link to Phpass site
|
| Jul 26, 2022 at 7:25 | comment | added | user106319 |
Thank you for your answer! In the database I have in the Joomla site, it starts with this: $2y$10$.
|
|
| Jul 26, 2022 at 7:02 | history | answered | avpaderno♦ | CC BY-SA 4.0 |