Skip to content
  1. Apr 01, 2008
  2. Mar 31, 2008
    • Dries Buytaert's avatar
      - Patch #29706 by pwolanin, solardiz, et al: more secure password hashing. · ed59911f
      Dries Buytaert authored
        This is a big and important patch for Drupal's security.  We are switching
        to much stronger password hashes that are also compatible with the Portable
        PHP password hashing framework.
      
        The new password hashes defeat a number of attacks, including:
      
        - The ability to try candidate passwords against multiple hashes at once.
        - The ability to use pre-hashed lists of candidate passwords.
        - The ability to determine whether two users have the same (or different)
          password without actually having to guess one of the passwords.
      
        Also implemented a pluggable password hashing API (similar to how an alternate
        cache mechanism can be used) to allow developers to readily substitute an
        alternative hashing and authentication scheme.
      
        Thanks all!
      ed59911f
    • Dries Buytaert's avatar
      - Patch #239958 by Steve Dondley: make the explicit cache clearing... · 771950b1
      Dries Buytaert authored
      - Patch #239958 by Steve Dondley: make the explicit cache clearing functionality reload the theme's .info file.  (We're back from a vacation in the French Alpes, BTW!  Time to catch up with patches.)
      771950b1
  3. Mar 25, 2008
  4. Mar 21, 2008
  5. Mar 19, 2008
  6. Mar 17, 2008
  7. Mar 15, 2008
  8. Mar 14, 2008
  9. Feb 23, 2008
  10. Feb 21, 2008
  11. Feb 20, 2008
  12. Feb 18, 2008
  13. Feb 17, 2008
  14. Feb 14, 2008
  15. Feb 12, 2008
  16. Feb 10, 2008
  17. Feb 08, 2008
  18. Feb 06, 2008
  19. Feb 04, 2008
  20. Feb 03, 2008
  21. Jan 30, 2008