3

I tried to register a new user from Joomla frontend, registration was successful plus activation via email was also successful, now when i try to login using the new credentials, i get a error " Username and password don not match or you don't have an account yet "?

What's interesting?
-> when i registered from frontend and set the password to read , this value was found in _users table f0bb7564f8c84d1cbdada8dc04493be2

-> & when i set the password to read using Joomla backend, this value was found in _users table 0edda82c8ad9aa4da0dfe3b64f249c18:dqRwd90MzB21LP8waOjW0XEQzt4LSZoE and the login was successful?

I AM CONFUSED, WHY TWO DIFFERENT VALUES FOR SAME PASSWORD read
[Joomla Version : 3.2] [PHP Version : 5.4]

Improve this question
2
  • Please add the exact version of your Joomla. 3.2 is likely too broad for this question.
    – Bakual
    Commented May 11, 2014 at 9:43
  • THANK YOU ALL! YOU ALL WERE HELPFUL! I GOT MY SITE BACK ON BUSINESS
    – saibbyweb
    Commented May 11, 2014 at 17:13

2 Answers 2

Reset to default
1

I have seen this issue with 3.2.0 in particular, especially if the site has been updated from 3.1.* Although I can't remember exactly, I think it has something to do with the change of password hashing from md5 to bcrypt or the addition of Two factor authentication.

Have you tried "updating to 3.2.3" by installing the update package through extension manager. Checking the database is updated and then try again?

Improve this answer
10
  • can anybody guide me how to change password hashing from md5 to bcrypt?? -- i am afraid to update joomla at this point of time with this problem! :(
    – saibbyweb
    Commented May 11, 2014 at 9:54
  • Can you provide exact Joomla version and site history (was it updated/migrated?)
    – BodgeIT
    Commented May 11, 2014 at 10:07
  • Hey! i just updated to Joomla 3.2.4 from Joomla 3.2.0 and enabled Two Factor Authentication and the problem was solved but at the login form it showing another field "Secret Key" , how to remove that?? [i left it blank and logged in with username & password only. It worked!] is there anyway to remove that field?
    – saibbyweb
    Commented May 11, 2014 at 10:16
  • You don't need to enable two factor authentication. The update has resolved the issue not two factor auth. You may now need to resave your users passwords.
    – BodgeIT
    Commented May 11, 2014 at 10:31
  • 1
    Use PHPMyAdmin to change your password. You can use: 0edda82c8ad9aa4da0dfe3b64f249c18:dqRwd90MzB21LP8waOjW0XEQzt4LSZoE (read). Then change it once logged in.
    – BodgeIT
    Commented May 11, 2014 at 11:00
2

Joomla 3.2.0 had a major bug with password storage which was fixed with Joomla 3.2.1. You issues sounds quite like that.

See http://community.joomla.org/blogs/leadership/1790-update-on-321-and-security-enhancements.html for some more details

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.