Bravo List
Register
Go Back   > Bravo List > Torrents Trackers > Project U-232
View Poll Results: NEW tracker source: Project U-232
I will give it a try 403 76.33%
No, i`m using another source 69 13.07%
XAM is my hero, i`m sticking to Template Shares 56 10.61%
Voters: 528. You may not vote on this poll

Reply
  #421  
Old 01-12-17, 07:49
DND's Avatar
DND DND is online now
Support
 
Join Date: Dec 2008
Posts: 974
Default
Vinnie stop being an ass !
U-232 might be using md5 but it is using with a salt key every time.
when its the last time you heard about sites using this and gettin' hacked?
jesus christ..just read/think before you post.
__________________
Need HELP!? I can install:

  1. Server/VPS (Debian,CentOS,Ubuntu,Fedora, FreeBSD) Optimization and ... + Modules
  2. Webserver Windows/Linux (Apache/Lighttpd/Nginx/Mysql/PhpMyAdmin/SSL) Optimization and ... + Modules
  3. Seedbox Windows/Linux (uTorrent,rTorrent,libTorrent,ruTorrent) + Modules
  4. TBDev Support
  5. Gazelle Support Install
  6. TSSE Install Support
Reply With Quote
  #422  
Old 01-12-17, 08:50
Ladbexy's Avatar
Ladbexy Ladbexy is offline
Member
 
Join Date: Oct 2010
P2P
Posts: 13
Default
Quote:
Originally Posted by Vinnie981 View Post
U232 uses a outdated password hashing method. https://github.com/Bigjoos/U-232-V5/..._functions.php

Being on V5 already I am suggesting that this be a priority issue and that U232 goes with the standard PHP bcrypt method.
Well sure it might uses md5 hashing methods but at least they made it open source,and they don't talk shit for other sources like you,which you develop an source but you have it closed to the public.
Reply With Quote
  #423  
Old 01-12-17, 16:21
Bigjoos's Avatar
Bigjoos Bigjoos is offline
U-232 Dev
 
Join Date: May 2008
United Kingdom
Posts: 241
Default
I created an updated make_passhash_login_key function 3-4 years ago think it was, used a random MYCRYPT salt and password_hash(PASSWORD_BYCRYPT, just never implemented it.
Will update it when we release next major update in coming months. Its priority is low, unique salted md5 is no pushover if that's what you actually think.
Reply With Quote
  #424  
Old 01-12-17, 20:10
HDVinnie's Avatar
HDVinnie HDVinnie is offline
BluCrew
 
Join Date: Dec 2014
P2P
Posts: 47
Default
lol I figured the butt hurt flaming would come..........no disrespect was meant. Glad its on your list big. Not saying its a downfall but if making u232 php7 ready, mysql5.7 ready with strict mode support I would think would take use of the bcrypt is all.

Bump:
Quote:
Originally Posted by Ladbexy View Post
Well sure it might uses md5 hashing methods but at least they made it open source,and they don't talk shit for other sources like you,which you develop an source but you have it closed to the public.
really? where did I talk shit?
Reply With Quote
  #425  
Old 01-12-17, 21:46
Bigjoos's Avatar
Bigjoos Bigjoos is offline
U-232 Dev
 
Join Date: May 2008
United Kingdom
Posts: 241
Default
I understand where your coming from vinnie, no problem at all. I've had a lot going on real life but I'm finally getting my head back into code. You can be assured it will be addressed soon, codes been on the test server for ages.

Last edited by Bigjoos; 05-12-17 at 21:18.
Reply With Quote
Reply

Tags
project , project u232 , torrents tracker , u232

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



All times are GMT +2. The time now is 20:15. vBulletin skin by ForumMonkeys. Powered by vBulletin® Version 3.8.11 Beta 3
Copyright ©2000 - 2017, vBulletin Solutions Inc.