Hot answers tagged password
B in this password means that this encryption uses random salt, than md5(saltWithDash . md5(password)). If you want to check user input with password from database, you need to extract salt from password and combine user password with that salt. Next, compare this two hashes, and if matches, user password is valid. <?php $password = 'password'; ...
Hope this helps someone: This is how mediawiki saves the user password in the database. Please see @Aleksander's answer for more details.
You can force a password change by running UPDATE user SET user_password_expires = '19990101000000'; (This is not the same as a password reset as it will accept the old password one time. Less secure, more forgiving.) If you cannot be bothered to look up the DB password, you can just use maintenance/sql.php.
Can you perform a query? UPDATE the_table SET password='UserNeedsToResetPassword'; Now all users' passwords dont work anymore. I choose plain text, because I cant think of a way that sha1($_POST['pass']) results in this ;) (or whatever hash you use)
Only top voted, non community-wiki answers of a minimum length are eligible