silverorange/admin

Site backend admin platform.

admin's Issues

Use hash() to hash passwords

AdminUser still stores password hashs and salts as two separate fields and implements its own hash using MD5.

Password hasining should be updated to use php's hash() function where the salt value and hash format are stored as a prefix to the password hash.

Remove Generated Passwords

We should always send people a reset password link. Stop sending people generated passwords.

AdminApplication::setMemcacheInstanceValues() can mess up added cache values

Since added cached values are deferred until the end of the request, all cached values will use the last instance values that are set on the memcache module.

The correct solution should create one module per instance and add convenience methods that also have an instance parameter.

This doesn't affect any known code yet but might be an issue in the future.

Add support to AdminUser for using LDAP to authenticate

Right now people have to remember separate passwords for our sites and/or use the same password everywhere which is a pain to change. Adding support for using LDAP would be great.