New Security Update and Password Hashes

[ragesw]

After upgrading to 5.1.9 my API code broke.

 

I tracked it down to the password hash I was generating from the user inputted password. It's not matching what is returned by the Get Client Details API call: http://docs.whmcs.com/API:Get_Clients_Details

 

I am hashing the user inputted password properly using the salt in the form of;

 

$newpassword = md5($salt.$request_password);

 

And it was working fine before the update.

 

Was there a change to the way passwords are hashed in 5.1.9?

 

Is anyone having a similar issue?

 

Thanks,

Paul

[ragesw]

This issue has been resolved. It was related to how the script was written and a possible change in the latest 5.1.9 update which broke it. Basically variable names were being sent with single quotes around them.