Bug #15769 Updated: php-4.0 crypt("abc") != php-4.1 crypt("abc")

ID: 15769 Updated by: abraxes@gmx.de Reported By: php@8304.ch Status: Bogus Bug Type: *Encryption and hash functions Operating System: linux PHP Version: 4.1.1 New Comment: maybe it behaves like documented, but many php scripts onley uses crypt("whatever") to crypt something. if the result is stored in a db, and the db field is limited to 11 chars, then u have fun with this new feature. if u only have your own php code on a machine, then u can change the code, but if u have many php driven sites, this will lead u into trouble, thats why i made our php 4.1.2 work like it worked before. Previous Comments: ------------------------------------------------------------------------ [2002-02-28 10:00:47] sniper@php.net The behaviour changed because there was a bug in the detection for crypt() capabilities in previous PHP versions. Now it behaves as documented. --Jani ------------------------------------------------------------------------ [2002-02-28 09:55:59] edink@php.net The behaviour unfortunatelly did change (and its not documented). You don't have to disable MD5 like that to get regular crypt, but you would need to generate a two character salt, which would then be passed as a second argument to crypt(). ------------------------------------------------------------------------ [2002-02-28 07:32:22] php@8304.ch ok, found a solution : 1. ./configure [options] 2. edit main/php_config.h and set PHP_MD5_CRYPT = 0 3. compile. ------------------------------------------------------------------------ [2002-02-28 05:44:41] php@8304.ch from the docs: > If no salt is provided, PHP will auto-generate a standard > 2 character salt by default, unless the default encryption > type on the system is MD5, in which case a random > MD5-compatible salt is generated. well, the "default encryption type" on the system has not changed between upgrade from 4.0 to 4.1, so why does the crypt behaviour change on the way? I really see that as a bug, or please tell me how to revert to the "normal" crypt (DES). Saw no options in the ./configure as well... :/ ------------------------------------------------------------------------ [2002-02-28 02:09:06] sniper@php.net This is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php http://www.php.net/manual/en/function.crypt.php ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/15769 -- Edit this bug report at http://bugs.php.net/?id=15769&edit=1