3 ms·
This wasn't the PW hashing fucntion. The new method hashes using the bcrypt of the password, which they do have.
by thedz 11y ago
This wasn't the PW hashing fucntion. The new method hashes using the bcrypt of the password, which they do have.
- bradleyjg 11y agoBingo. All they had to do is delete all the login tokens. Users with what would have otherwise been a valid cookie would have had to re-log in, but that's a minor inconvenience that's expected to happen from time to time.