diff options
author | Philipp Sehmisch <crush@themanaworld.org> | 2009-12-04 22:16:58 +0100 |
---|---|---|
committer | Philipp Sehmisch <crush@themanaworld.org> | 2009-12-04 22:16:58 +0100 |
commit | 9cd36fcfdf2b67adfe23153c565c95580d40f396 (patch) | |
tree | 753e0a0f551b8db61588f87ea2378e1f0ec57e16 /src/account-server | |
parent | 37c267d710a8b6b48dd4f087d0035cb4fd768f87 (diff) | |
download | manaserv-9cd36fcfdf2b67adfe23153c565c95580d40f396.tar.gz manaserv-9cd36fcfdf2b67adfe23153c565c95580d40f396.tar.bz2 manaserv-9cd36fcfdf2b67adfe23153c565c95580d40f396.tar.xz manaserv-9cd36fcfdf2b67adfe23153c565c95580d40f396.zip |
Moved password hashing during registration to the client.
Diffstat (limited to 'src/account-server')
-rw-r--r-- | src/account-server/accounthandler.cpp | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/account-server/accounthandler.cpp b/src/account-server/accounthandler.cpp index 9a3674db..73fffb49 100644 --- a/src/account-server/accounthandler.cpp +++ b/src/account-server/accounthandler.cpp @@ -382,10 +382,10 @@ void AccountHandler::handleRegisterMessage(AccountClient &client, MessageIn &msg { Account *acc = new Account; acc->setName(username); - // We set the password - // TODO: apply hashing here and during login acc->setPassword(password); - // We hash email server-side without using a salt. + // We hash email server-side for additional privacy + // we ask for it again when we need it and verify it + // through comparing it with the hash acc->setEmail(sha256(email)); acc->setLevel(AL_PLAYER); |