Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • mahara mahara
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 1
    • Issues 1
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 1
    • Merge requests 1
  • Deployments
    • Deployments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Wiki
    • Wiki
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • maharamahara
  • maharamahara
  • Repository
Switch branch/tag
  • mahara
  • htdocs
  • lang
  • en.utf8
  • error.php
Find file BlameHistoryPermalink
  • Hugh Davenport's avatar
    Add a sitewide salt that isn't in the db · 5a714bf7
    Hugh Davenport authored Nov 15, 2011
    This salt is used to add an extra layer of salting that
    isn't visible from the database. This requires attackers
    to obtain both the database, and the config.php file to
    get the true salt value that is passed to crypt.
    
    Bug #843568
    
    See http://docs.moodle.org/20/en/Password_salting
    
    
    
    Change-Id: Iaa575a4724e387104f9e436c07b336ef8c7ebef5
    Signed-off-by: default avatarHugh Davenport <hugh@catalyst.net.nz>
    Signed-off-by: default avatarFrancois Marier <francois@catalyst.net.nz>
    5a714bf7