SupportSuite work with Joomla 1.0.13?

[fm-soares]

Joomla! team has announced the availability of Joomla! 1.5 RC1. In a small paragraph at the end of this article you can read that Joomla! 1.0.13 has been released surprisingly. Joomla! 1.0.13 is an "incremental bug fixing and security update for Joomla! 1.0 series software".

- J! 1.0.13 uses a different method to encrypt passwords that the Joomla! version before
- the core login function parameter declaration/types were changed

The question is! This maintenance release works on Joomla CMS loginShare file? (\includes\LoginShare\loginshare.php)

Thanks a Lot!

Soares

[craigbrass]

Test it and see. Post back if it doesn't and then it can be modified to work with 1.5.

[Joey]

The loginshare for Joomla 1.0.13 and SupportSuite 3.11.01 stable is definitely broken.

-joey

[fm-soares]

The SupportSuite 3.11.01 Stable loginshare file for Joomla 1.0.13 no works im my tests!

TKS

Soares

[craigbrass]

I'll do some tests tomorrow and see if I can sort it out as I submitted this LoginShare to Kayako.

[craigbrass]

Ok, after a bit of testing, I have found that Joomla changed their login routine in 1.0.13 onwards. They now use a crypt salt password. As this is a one way algorithm, there is no way the LoginShare can be updated I can think of. LoginShares can only be created where :-
1. The password is stored as plain text.
2. The password uses MD5.
3. The encryption algorithm used can be decrypted some way to get it back to plain text.

Sorry this isn't the answer you were after.

[Jamie Edwards]

I suggest you take a look at the vBulletin LoginShare - the passwords there are stored as salted MD5 sums.

[fm-soares]

Im try to update joomla.php LoginShare file, with salted MD5 sums like vBulletin file but not works, i'm a bad programer!

With these problems i don't think iwill work with Joomla 1.0.13! My site are just working great with 1.0.12, is now add+ SupportSuite! Great tool! ... No fear for my passwords! I'd prefer to wait the final release of Joomla 1.5 and SupportSuite futures updates, and then making hard work for converting my site...

If somebody fidn a solution, please post here! after i upgrade Joomla 1.X

Thanks for Help!

Soares

[fm-soares]

Im put this post at Joomla Forums to find a solution! co-reference purpose

http://forum.joomla.org/index.php/topic,217746.0.html

[Jamie Edwards]

@Craig - did you take a look at the vBulletin LoginShare module file to see how that handles salting? I'll take a look myself soon.

[craigbrass]

Sorry, yes. I was looking at this but something came up and I forgot about it. Will carry on looking into it now.

[craigbrass]

Ok, its sorted and working. See attached. Just replace this inside the /includes/LoginShare/ directory for 1.0.13+ ONLY. Any sooner versions don't require it and won't work with it.

Thanks to Andrew (the coder that works for my company) for getting it to separate the password out (as it is stored like Hash:Salt inside the database).

Enjoy.

[fm-soares]

Man! works! perfect!

Great!, im try and try but nothing! is now WoW!

Very, very thanks for You Craig, to Andrew and Jamie

[Jamie Edwards]

Well done Craig and thanks for sharing

[craigbrass]

Your welcome. I'll see what can be done about getting it to detect the version installed and then one LoginShare would work both the versions up to .12 and versions beyond then I can get Mahesh to include it with Kayako.

Ok, Andrew has updated it and it now works for all Joomla versions by detecting the presence of the ":" in the password field. I will open a ticket for Mahesh for him to add into CVS.

Ok, shoved in the Abuse department (as I know that is headed by you Jamie) so you can move it to one Mahesh will get as it wouldn't allow me to do that directly. ID is RUX-401871.