I have a new install of limesurvey
Version 2.56.1 Build 161118
Windows 7
Apache 2.2.25
PHP 5.4.38
Postgresql 9.1.13
The install ran as expected and as I had seen in previous posts I did not adjust the admin username, or password and accepted the default.
When I tried to login for the first time using the default password for admin, it failed. I accessed the user record and added my email address. I reset the admin password. Still no luck. I noticed on many posts that upgrading PHP solved the problem. I do not believe it is a valid solution. Does anyone have any idea why it fails? I have other application on my server which may or may not work with a php upgrade.
I believe the issue may be in the hashing or storing of the passwords in general.
When I retrieve the password from the db in postgres resource i get
a 130 character string with one letter at the from followed by 129 numeric characters
for example:
x31303834346635373935363763523639636661353438613162616539656337613733313063626539873864333661393765633236666438336432353536656534
hash('sha256', $password) = 10844f579567c269cfa548a1bae9ec7a7310cbe978d36a97ec26fd83d2556ee4
This string is being compared to a
Authdb.php line 170
if ($sStoredPassword !== hash('sha256', $password))
They will never be the same. The lenght alone causes the comparison to fail.
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member. -
Professional support
-
Plugins, theme and development
. I don't answer to private message.