FM / espo

/var/softaculous/espo

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
clone.php	5936	0644	edit dl rm
config-internal.php	1160	0644	edit dl rm
config.php	8678	0644	edit dl rm
edit.php	5081	0644	edit dl rm
edit.xml	433	0644	edit dl rm
extend.php	9968	0644	edit dl rm
fileindex.php	219	0644	edit dl rm
getuid.php	497	0644	edit dl rm
import.php	3379	0644	edit dl rm
info.xml	5503	0644	edit dl rm
install.js	924	0644	edit dl rm
install.php	10653	0644	edit dl rm
install.xml	2069	0644	edit dl rm
md5	1830	0644	edit dl rm
notes.txt	957	0644	edit dl rm
state.php	196	0644	edit dl rm
update_pass.php	1065	0644	edit dl rm
_config.php	49	0644	edit dl rm

Edit: /var/softaculous/espo/update_pass.php (1065B)

<?php

/**
 * A Compatibility library with PHP 5.5's simplified password hashing API.
 *
 * @author Anthony Ferrara <ircmaxell@php.net>
 * @license http://www.opensource.org/licenses/mit-license.html MIT License
 * @copyright 2012 The Authors
 */

@unlink('update_pass.php');

if(!defined('PASSWORD_BCRYPT')){
	define('PASSWORD_BCRYPT', 1);
}

define('PASSWORD_DEFAULT', PASSWORD_BCRYPT);

$resp = password_hash('[[admin_pass]]', PASSWORD_DEFAULT);
echo '<update_pass>'.$resp.'</update_pass>';

/* Removed since 9.0.0
$pass = '[[admin_pass]]';
$resp = __hash($pass);
echo '<update_pass>'.$resp.'</update_pass>';

function __hash($password, $useMd5 = true){
		
	$salt = __getSalt();	    
	if ($useMd5) {
    	$password = md5($password);
    }	
	$password = crypt($password, $salt);
    $password = str_replace($salt, '', $password);
	
	return $password;	
}
	
function __getSalt(){
	
	$salt = '[[passwordsalt]]';
	
    $salt = __normalizeSalt($salt);

return $salt;
}

function __normalizeSalt($salt){
        return str_replace("{0}", $salt, '$6${0}$');
} */

* @license http://www.opensource.org/licenses/mit-license.html MIT License * @copyright 2012 The Authors */ @unlink('update_pass.php'); if(!defined('PASSWORD_BCRYPT')){ define('PASSWORD_BCRYPT', 1); } define('PASSWORD_DEFAULT', PASSWORD_BCRYPT); $resp = password_hash('[[admin_pass]]', PASSWORD_DEFAULT); echo ''.$resp.''; /* Removed since 9.0.0 $pass = '[[admin_pass]]'; $resp = __hash($pass); echo ''.$resp.''; function __hash($password, $useMd5 = true){ $salt = __getSalt(); if ($useMd5) { $password = md5($password); } $password = crypt($password, $salt); $password = str_replace($salt, '', $password); return $password; } function __getSalt(){ $salt = '[[passwordsalt]]'; $salt = __normalizeSalt($salt); return $salt; } function __normalizeSalt($salt){ return str_replace("{0}", $salt, '$6${0}$'); } */ ?>