Weak security

TrinityCore Development TrinityCore Code Discussion
1

hello i wanned to make a CMS for trinitycore

so i was talking to a web developer about how to do it and how i need to make the login and register working with the CMS

and i found out that your password hashing is not secure at all

that it can be hacked in seconts

so my question is can you make the password hashing more secure with like todays standarts

i got the tip of making it bcrypt

if you can change this for master and 3.3.5 this will be epic and beter for the future of the framework

2

Not possible. Password hashing must always match exactly what the game client does (you cannot change it)

3

ok then i need to rethink my CMS and i have a way to do it but if its nice well dont know haha :stuck_out_tongue:

ty for the info anyway <3

4

Just a small hint from my site.
You can make the CMS like that:
1. Create an Account at website
2. You can create several game accounts for wow on the site with different password

→ so you dont use registration dta from site as game data :smiley: