ECShop V2.7.3 Administrator Password encryption method

Forget the local ecshop user password, just looked down. The ECShop V2.7.3 password is encrypted in such a way that:

if(!Empty($Ec_salt))     {/ * Check that the password is correct * /$SQL="Select user_id, user_name, password, last_login, action_list, Last_login,suppliers_id,ec_salt"."from".$ECS->table (' Admin_user ') ."WHERE user_name = '".$_post[' username ']."' and password = '". MD5 (MD5 ($_post[' Password ']).$Ec_salt) ."'"; }Else{/ * Check that the password is correct * /$SQL="Select user_id, user_name, password, last_login, action_list, Last_login,suppliers_id,ec_salt"."from".$ECS->table (' Admin_user ') ."WHERE user_name = '".$_post[' username ']."' and password = '". MD5 ($_post[' Password ']) ."'"; }

First, check that the Ec_salt field in the Admin_user table is empty and not empty, so encrypt: MD5 (MD5 (clear text password). $ec _salt); empty MD5 (plaintext password).

For example, if you want to reset the admin password (the admin's Ec_salt field doesn't seem to be empty, $ec _salt is the value of the Ec_salt field), set the value of the password field to: MD5 (MD5 (' admin '). $ec _salt) = 374C3361928AB9CA42794299A48E83A1

ECShop V2.7.3 Administrator Password encryption method