PHP 5.3.7 released, but the update contains a critical error
On August 18, version 5.3.7 was announced.
On August 22, Upgrade Warning was announced, which does not recommend the installation / upgrade of this version.
In short: when using the crypt () function, only salt is returned for MD5 hashes.
It turns out here is such a very unpleasant thing: The bug only works for MD5 (default by default in php), DES and BLOWFISH are not affected. The developers promise to release version 5.3.8 with a bugfix in a few days. Bug # 55439 crypt () returns only the salt for MD5
On August 22, Upgrade Warning was announced, which does not recommend the installation / upgrade of this version.
In short: when using the crypt () function, only salt is returned for MD5 hashes.
It turns out here is such a very unpleasant thing: The bug only works for MD5 (default by default in php), DES and BLOWFISH are not affected. The developers promise to release version 5.3.8 with a bugfix in a few days. Bug # 55439 crypt () returns only the salt for MD5
printf("MD5: %s\n", crypt('password', '$1$U7AjYB.O$'));
Должно быть:
----------------
MD5: $1$U7AjYB.O$L1N7ux7twaMIMw0En8UUR1
А получается только соль:
--------------
MD5: $1$U7AjYB.O