"password_hashing.php" File is not working on live server

system · August 14, 2015, 10:28am

corewaysolution wrote on Friday, August 14, 2015:

I m Working on php 5.6.2 ubuntu server which runs this openemr project.
when i go to my login page it shows but when i give username and password than the blank page occurs .

i have started debug this issue found that there is problem in this below function in “password_hashing.php” file

function password_hash($plaintext,$salt)
{
// if this is a SHA1 salt, the use prepended salt
if(strpos($salt,SALT_PREFIX_SHA1)===0)
{
return SALT_PREFIX_SHA1 . sha1($salt.$plaintext);
}
else { // Otherwise use PHP crypt()

    return crypt($plaintext,$salt);
	
}

}

system · August 14, 2015, 10:38am

yehster wrote on Friday, August 14, 2015:

That is the result of using an outdated version of OpenEMR.

To prevent the conflict the function name conflict, newer version have renamed it to oemr_password_hash

github.com

openemr/openemr/blob/master/library/authentication/password_hashing.php#L94


* If the crypt function returns an error or illegal hash, then will die.
* </pre>
*
* @param type $plaintext
* @param type $salt
* @return type
*/
function oemr_password_hash($plaintext, $salt)
{
   // if this is a SHA1 salt, the use prepended salt
   if (strpos($salt, SALT_PREFIX_SHA1)===0) {
       return SALT_PREFIX_SHA1 . sha1($salt.$plaintext);
   } else { // Otherwise use PHP crypt()
       $crypt_return = crypt($plaintext, $salt);
       if (($crypt_return == '*0') || ($crypt_return == '*1') || (strlen($crypt_return) < 6)) {
           // Error code returned by crypt or not hash, so die
           error_log("FATAL ERROR: crypt() function is not working correctly in OpenEMR");
           die("FATAL ERROR: crypt() function is not working correctly in OpenEMR");
       } else {
           // Hash confirmed, so return the hash.
           return $crypt_return;

system · August 14, 2015, 10:43am

fsgl wrote on Friday, August 14, 2015:

Try this,