04-17-2017, 03:27 AM
I would definitely not modify the userpice "core" code (i.e. the stuff in the users folder). There are better ways to do this.
There are a few ways to attempt it...
1. (Easiest) use the regular login form and put up a message telling people that if their password doesn't work, they should use the "forgot password" link and it will give them a bcrypt password.
2. Write a custom version of login.php (putting it in the usersc folder) that checks their md5 password and then immediately changes their password over to bcrypt.
3. We could work on some sort of "force password reset" feature also.
Let me know what you're thinking and I'll help you figure it out. Either way, you don't want to leave them as md5.
There are a few ways to attempt it...
1. (Easiest) use the regular login form and put up a message telling people that if their password doesn't work, they should use the "forgot password" link and it will give them a bcrypt password.
2. Write a custom version of login.php (putting it in the usersc folder) that checks their md5 password and then immediately changes their password over to bcrypt.
3. We could work on some sort of "force password reset" feature also.
Let me know what you're thinking and I'll help you figure it out. Either way, you don't want to leave them as md5.