{"action":"closed","issue":{"url":"https://api.github.com/repos/dominikjahn/wiki/issues/23","labels_url":"https://api.github.com/repos/dominikjahn/wiki/issues/23/labels{/name}","comments_url":"https://api.github.com/repos/dominikjahn/wiki/issues/23/comments","events_url":"https://api.github.com/repos/dominikjahn/wiki/issues/23/events","html_url":"https://github.com/dominikjahn/wiki/issues/23","id":97331156,"number":23,"title":"Add additional password salts","user":{"login":"dominikjahn","id":10146557,"avatar_url":"https://avatars.githubusercontent.com/u/10146557?v=3","gravatar_id":"","url":"https://api.github.com/users/dominikjahn","html_url":"https://github.com/dominikjahn","followers_url":"https://api.github.com/users/dominikjahn/followers","following_url":"https://api.github.com/users/dominikjahn/following{/other_user}","gists_url":"https://api.github.com/users/dominikjahn/gists{/gist_id}","starred_url":"https://api.github.com/users/dominikjahn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dominikjahn/subscriptions","organizations_url":"https://api.github.com/users/dominikjahn/orgs","repos_url":"https://api.github.com/users/dominikjahn/repos","events_url":"https://api.github.com/users/dominikjahn/events{/privacy}","received_events_url":"https://api.github.com/users/dominikjahn/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/dominikjahn/wiki/labels/Feature%20request","name":"Feature request","color":"009800"},{"url":"https://api.github.com/repos/dominikjahn/wiki/labels/Must%20have","name":"Must have","color":"fbca04"},{"url":"https://api.github.com/repos/dominikjahn/wiki/labels/Security","name":"Security","color":"9f6db9"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/dominikjahn/wiki/milestones/1","html_url":"https://github.com/dominikjahn/wiki/milestones/Version%200.1%20RC","labels_url":"https://api.github.com/repos/dominikjahn/wiki/milestones/1/labels","id":1284691,"number":1,"title":"Version 0.1 RC","description":"This release candidate should have the most basic features of a wiki software: creating pages, viewing them, editing them and browsing and restoring a change history.","creator":{"login":"dominikjahn","id":10146557,"avatar_url":"https://avatars.githubusercontent.com/u/10146557?v=3","gravatar_id":"","url":"https://api.github.com/users/dominikjahn","html_url":"https://github.com/dominikjahn","followers_url":"https://api.github.com/users/dominikjahn/followers","following_url":"https://api.github.com/users/dominikjahn/following{/other_user}","gists_url":"https://api.github.com/users/dominikjahn/gists{/gist_id}","starred_url":"https://api.github.com/users/dominikjahn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dominikjahn/subscriptions","organizations_url":"https://api.github.com/users/dominikjahn/orgs","repos_url":"https://api.github.com/users/dominikjahn/repos","events_url":"https://api.github.com/users/dominikjahn/events{/privacy}","received_events_url":"https://api.github.com/users/dominikjahn/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":32,"state":"open","created_at":"2015-09-01T19:22:30Z","updated_at":"2015-11-02T20:00:33Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2015-07-26T16:27:10Z","updated_at":"2015-11-02T20:00:33Z","closed_at":"2015-11-02T20:00:33Z","body":"One salt should be global and stored in the 'Core/Configuration.php' file. It should be used to hash passwords for the cookies. Changing it would sign out every user (useful after a breach occured!).\r\n\r\nAnother salt should be generated for each user to further hash their password in the database.\r\n\r\nHashing of passwords should then be moved to server-side, like ```wiki.Hash(userID, pre-md5-ed-password)```. Single-MD5'ed Passwords of a single user would then still be surfaced by listening to the connection, but the hashes in the database for all users would be safe."}}