https://github.com/ashleykleynhans/yourls-plugin-md5-salt

Provide backwards compatibility for YOURLS secure passwordless API calls when upgrading YOURS from version 1.7.4 to version 1.9.1.
https://github.com/ashleykleynhans/yourls-plugin-md5-salt

Last synced: 23 days ago
JSON representation

Provide backwards compatibility for YOURLS secure passwordless API calls when upgrading YOURS from version 1.7.4 to version 1.9.1.

• Host: GitHub
• URL: https://github.com/ashleykleynhans/yourls-plugin-md5-salt
• Owner: ashleykleynhans
• License: gpl-3.0
• Created: 2023-01-05T07:18:52.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-01-05T11:47:27.000Z (over 1 year ago)
• Last Synced: 2024-05-02T01:50:11.582Z (about 2 months ago)
• Language: PHP
• Size: 19.5 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Lists

• awesome - md5 salt - Provide backwards compatibility for those still using `md5` in their passwordless API calls. (Plugins / M)

README

        
# YOURLS plugin to use md5 salt

## Description

The [YOURLS](https://github.com/YOURLS/YOURLS) Open Source URL shortener used

an `md5` hash within the `yourls_salt` function in version 1.7.4, but somewhere

between 1.7.4 and 1.9.1, this was changed to use `hash_hmac` with a default

`yourls_hmac_algo` of `sha256`.

If you were using the Secret signature token for Secure passwordless API

calls in version 1.7.4 and then upgraded to version 1.9.1, this change would

cause the token to change, thus causing the API calls to fail.

This plugin provides backwards compatibiliy for the `yours_salt` function to

continue to use `md5`, so that upgrading YOURLS from 1.7.4 to 1.9.1 does not

cause API calls to stop working.

### Installation

1.  Clone the repo

    ```bash

    cd /tmp

    git clone https://github.com/ashleykleynhans/yourls-plugin-md5-salt.git

    ```

2.  Copy the plugin to your YOURLS code

    ```bash

    cp -r yourls-plugin-md5-salt /var/www/html/user/plugins

    ```

3.  Enable the plugin in the YOURLS admin interface in your web browser.