summaryrefslogtreecommitdiff
path: root/src/account-server/accounthandler.cpp
diff options
context:
space:
mode:
authorPhilipp Sehmisch <crush@themanaworld.org>2009-12-04 22:16:58 +0100
committerPhilipp Sehmisch <crush@themanaworld.org>2009-12-04 22:16:58 +0100
commit9cd36fcfdf2b67adfe23153c565c95580d40f396 (patch)
tree753e0a0f551b8db61588f87ea2378e1f0ec57e16 /src/account-server/accounthandler.cpp
parent37c267d710a8b6b48dd4f087d0035cb4fd768f87 (diff)
downloadmanaserv-9cd36fcfdf2b67adfe23153c565c95580d40f396.tar.gz
manaserv-9cd36fcfdf2b67adfe23153c565c95580d40f396.tar.bz2
manaserv-9cd36fcfdf2b67adfe23153c565c95580d40f396.tar.xz
manaserv-9cd36fcfdf2b67adfe23153c565c95580d40f396.zip
Moved password hashing during registration to the client.
Diffstat (limited to 'src/account-server/accounthandler.cpp')
-rw-r--r--src/account-server/accounthandler.cpp6
1 files changed, 3 insertions, 3 deletions
diff --git a/src/account-server/accounthandler.cpp b/src/account-server/accounthandler.cpp
index 9a3674db..73fffb49 100644
--- a/src/account-server/accounthandler.cpp
+++ b/src/account-server/accounthandler.cpp
@@ -382,10 +382,10 @@ void AccountHandler::handleRegisterMessage(AccountClient &client, MessageIn &msg
{
Account *acc = new Account;
acc->setName(username);
- // We set the password
- // TODO: apply hashing here and during login
acc->setPassword(password);
- // We hash email server-side without using a salt.
+ // We hash email server-side for additional privacy
+ // we ask for it again when we need it and verify it
+ // through comparing it with the hash
acc->setEmail(sha256(email));
acc->setLevel(AL_PLAYER);