Where and how are passwords stored in Magento?

magento hash passwords ipb
datasn.io picture datasn.io · Oct 6, 2012 · Viewed 27.5k times · Source

It would be a tremendous user experience bless to have a universal login across various apps of my website. For now, I have a storefront of Magento and a community of IPS board. And I'm trying to integrate them into one universal login for my users.

IPS board offers a variety of login methods and one of them is External Database that enables me to integrate it with an external database for user details.

Fantastic! So I can link IPS with Magento's database for unified user credentials.

However, thus far I can only find the email field that is customer_entity.email.

My questions are:

  1. What is the password hash field (table.field) in Magento?
  2. How does Magento generate password hash? MD5? SHA1? What is the salt (I guess it's different by installation but where can I find it)?

As you can see from the attached images, I need the details of where and how Magento stores password to enable IPS to use Magento's database as external database for user login details.

Attached:

enter image description here

enter image description here

Any idea or suggestion on how to get this done would be greatly appreciated!

Answer

Dmytro Zavalkin picture Dmytro Zavalkin · Oct 7, 2012

Customer's password is stored in customer_entity_varchar, it is an eav attribute. You can't use IPB external database functionality. You should use Mage::getModel('customer/customer')->authenticate($logi, $password); to authenticate customers in your code.

Related questions

Class 'DOMDocument' not found

I've found an error on a page in my Magento application; it always show this message error when I visit it: Fatal error: Class 'DOMDocument' not found in /home/.../lib/Zend/Feed/Abstract.php on line 95 Can you give me …

Read More
There has been an error processing your request, Error log record number

I installed Magento, logged in admin panel. But if I press on any link to open let say CMS pages or users configuration, I get error like this: There has been an error processing your request Exception printing is disabled …

Read More
How to get a product's image in Magento?

I'm running on version 1.3.2.1, but on my client's server they had Magento 1.3.0 so my previous code to display images for my local copy, echo $this->helper('catalog/image')->init($_product)->resize(163, 100); , does not work on …

Read More