Invalid login details about mchostpanel HOT 2 CLOSED

remove the data/users/whatevername.json file and run install again.

from mchostpanel.

The problem is in the security section of inc/lib.php I think it has to do with most Linux distributions are now on higher versions of php such that what was relied up on to make the security doesn't actually work anymore.

If you don't care about security change the last two functions in inc/lib.ph to read

// Securely encrypt a password
function bcrypt($str) {
/*
        $salt = strtr(base64_salt(22),'+','.');
        $work = 13;
        $salt = sprintf('$2y$%s$%s',$work,$salt);
        $hash = crypt($str,$salt);
        if(strlen($hash)>13)
                return $hash;
        else
                return false;
*/
return $str;
}

// Verify a bcrypt-encyrpted string
function bcrypt_verify($str,$hash) {
        return $str == $hash;
}

and then you will be able to log in and out consistently.

I did not submit this as a pull request because it is a dirty hack. If someone can come up with a reliable way to make the security work despite the version of php or any salting and encrypting mechanism, then please rewrite these functions to handle that and that is what should be PR'd.

from mchostpanel.