| Current Path : /var/www/html/inatote/application/ |
| Current File : /var/www/html/inatote/application/CHANGELOG.md |
Ion Auth Changelog
===================================
## xx March 2018 - Ion Auth 3
- **General:**
- No longer work for empty password or password above 4096 bytes (DOS protection)
- **New server requirements:**
- Drop CodeIgniter 2 support
- Drop PHP < 5.6 support
- **Updated password hashing methods:**
- Drop SHA1 support (but support seamless migration from SHA1-based installation)
- Drop internal Bcrypt library (now uses built-in PHP functions)
- Add argon2 support (PHP > 7.2)
- Implements password automatic rehashing on login if needed (e.g. when hashing parameters changed)
- **Updated config values:**
- Higher default hashing parameters (e.g. higher cost for bcrypt)
- Allows different hashing parameters for admins
- Remove `random_rounds` bcrypt feature
- Better default value for `forgot_password_expiration`
- **Updated features:**
- Update _Remember me_ feature for more security
- Update _Password Reset_ feature for more security
- Update _User activation_ feature for more security
- **Removed features:**
- Remove `forgotten_password_complete` feature