ECShop V2.7.3管理員密碼加密方式,ecshopv2.7.3
忘了本地的ECShop的使用者密碼,就看了下。ECShop V2.7.3密碼的加密方式是這樣的:
if(!empty($ec_salt)) { /* 檢查密碼是否正確 */ $sql = "SELECT user_id, user_name, password, last_login, action_list, last_login,suppliers_id,ec_salt". " FROM " . $ecs->table('admin_user') . " WHERE user_name = '" . $_POST['username']. "' AND password = '" . md5(md5($_POST['password']).$ec_salt) . "'"; } else { /* 檢查密碼是否正確 */ $sql = "SELECT user_id, user_name, password, last_login, action_list, last_login,suppliers_id,ec_salt". " FROM " . $ecs->table('admin_user') . " WHERE user_name = '" . $_POST['username']. "' AND password = '" . md5($_POST['password']) . "'"; }
首先檢查admin_user表中ec_salt欄位是否為空白,不為空白則這樣加密:md5(md5(純文字密碼).$ec_salt);為空白則md5(純文字密碼)。
比如要想重設admin的密碼(admin的ec_salt欄位好像都不為空白,$ec_salt即為ec_salt欄位的值),則將password欄位的值設為:md5(md5('admin').$ec_salt)=374c3361928ab9ca42794299a48e83a1