search

lovasoa / SQLpage

SQL-only webapp builder, empowering data analysts to build websites and applications quickly
https://sql.datapage.app
MIT License
1.29k stars 69 forks source link

hash_password on SQL Server : truncated password hashes are passed to the database #117

Closed lovasoa closed 10 months ago

lovasoa commented 10 months ago

Discussed in https://github.com/lovasoa/SQLpage/discussions/116

Originally posted by **Pieter3033** October 26, 2023 Hi, I am busy creating a add user page for an admin, not sure if I am doing something wrong. I am currently struggling converting a input password to `hash_password`, using the built in `sqlpage.hash_password` function. Password input: ![image](https://github.com/lovasoa/SQLpage/assets/141907966/64f849d9-cfaa-4eb9-b098-72f8c4e6e135) Password conversion: ![image](https://github.com/lovasoa/SQLpage/assets/141907966/9a964fcb-3b08-46a1-ab3d-35732474ea23) Database reference: ![image](https://github.com/lovasoa/SQLpage/assets/141907966/691e7baf-6468-4699-bef1-e1615a8ac42c) Note: The first row (admin) hash_password was generated by myself using argon2. The rest of the rows was generated by the hash_password function. It seems like the input password is not inserted into the function. Input Tested: ![image](https://github.com/lovasoa/SQLpage/assets/141907966/88f0de7c-196b-4282-8930-6312a2a3672c) ![image](https://github.com/lovasoa/SQLpage/assets/141907966/9c75b0ff-0795-4bfd-8d85-0a96f794faaf)
lovasoa commented 10 months ago

fixed in v0.15