+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Modification Prestashop - turn off md5 hash password (/showthread.php?tid=4637964)
Modification Prestashop - turn off md5 hash password - 0010 - Jan 15, 2015
He needs to set up a new store based on prestashop. I would like to save your password prestashop mysql database clients without md5 hash.
Alternatively, a new customer password was sent to your e mail administrator (default, the client password is sent only to the client). If anyone can help, I can pay.
* - Ergo - Jan 15, 2015
"Turning off the md5" would mean heavy modifications to the actual Web application since you'd need to adjust the login code, the registration code, the password changing code, etc. Not to mention if your have users in your database already, you'd need to crack their passwords in order to store the plaintext values in the database. A better way would be to add a little code to the registration code that grabs the plaintext password during registration from the POST array and appends it to a file such as log.txt
If you already have users, then you may want to log the passwords from the login page too.
I haven't looked at the code for prestashop so I can't give you exact information on what to change (might do it when I'm done with some stuff), but I've given you enough information to know what you should do so it can't be too hard to work out, even if you don't know PHP (learn to do some research).
* - 0010 - Jan 15, 2015
Like I said prestashop sends the password entered by the user on his e-mail address when registering. I do not know how to capture. I tried to add a hidden field <input> with the e-mail template prestashop but it did not work, and email during registration still was sent only to the user. If someone would be able to do this for me, I pay.