Password Encryption Code

jumboteam

I want to create API to change the password for the user but I am not getting the exact encryption code can you help me?
@ntozier

ntozier

It uses md5.

https://tmib.net/recover-or-reset-admin-account-passowrd-in-osticket/

So it is actually md5 and a salt, but if you put it as md5 it will work for admin, so I imagine that it would also work for users/agents. You would need to look at the code to determine how the salt is used. I think that it is here:
https://github.com/osTicket/osTicket/blob/43bf186db9e85c8ec218158ea4c0bc3e90bbe3eb/include/PasswordHash.php

KevinTheJedi

@jumboteam

We actually use Portable Password hashing (PHPass) which utilizes bcrypt (one of my favorite encryption methods).

Cheers.

ntozier

@KevinTheJedi out of curiosity when did that change?

KevinTheJedi

@ntozier

It’s been like that as far as I can remember.

Cheers.

jumboteam

KevinTheJedi
So I am trying using this below code but it's not working
$password='admin';
$hasher = new PasswordHash(8,FALSE);
$hash=$hasher->HashPassword($password);
Can you suggest what's wrong in this or exact code so that i can change password of agent through API

KevinTheJedi

@jumboteam

Don't try and re-invent the wheel; use the already existing functions...if you would've preformed a search for "password" in the codebase you would've eventually stumbled across function setPassword($new, $current) {}. This function set's the staff's password. It takes two parameters $new and $current. $new is the new password you'd like to set and $current is the agent's current password.

Cheers.