So what's the best way to migrate a site that's using sha1 without salts to one that does use salts?
I expect it involves checking users' passwords two different ways (with salt, without) for the foreseeable future.
I expect it involves checking users' passwords two different ways (with salt, without) for the foreseeable future.
No comments yet.