Using RSA public/private key pairs to exchange password information.
commitc9a5aa413928a6666fce4d3f48e0285b5455b1ae
authorKevin Yeh <kevinyeh@alum.mit.edu>
Tue, 28 May 2013 14:00:00 +0000 (28 10:00 -0400)
committerKevin Yeh <kevinyeh@alum.mit.edu>
Tue, 28 May 2013 15:18:50 +0000 (28 11:18 -0400)
tree3bb624d7e145e16c6558421f822cf83f9fe28c16
parentcc06e12296cc2f156f1139337c3c9b397a63ebcb
Using RSA public/private key pairs to exchange password information.
Upgrade password storage from SHA1 to Blowfish with salts for both users
and onsite portal users
Move user passwords to separate table (users_secure)
Backwards compatability changes for systems that without support for
CRYPT_BLOWFISH. SHA1 + SALT is used instead
Implementation of Optional privileged database user + HOWTO documentation
37 files changed:
Documentation/privileged_db/example_user_permissions.sql [new file with mode: 0644]
Documentation/privileged_db/generate_table_permissions_script.sql [new file with mode: 0644]
Documentation/privileged_db/priv_db_HOWTO.txt [new file with mode: 0644]
Documentation/privileged_db/secure_sqlconf.php [new file with mode: 0644]
interface/login/login.php
interface/login/validateUser.php
interface/patient_file/summary/create_portallogin.php
interface/usergroup/user_admin.php
interface/usergroup/user_info.php
interface/usergroup/user_info_ajax.php [new file with mode: 0644]
interface/usergroup/usergroup_admin.php
interface/usergroup/usergroup_admin_add.php
library/ajax/rsa_request.php [new file with mode: 0644]
library/auth.inc
library/authentication/common_operations.php [new file with mode: 0644]
library/authentication/login_operations.php [new file with mode: 0644]
library/authentication/password_change.php [new file with mode: 0644]
library/authentication/password_hashing.php [new file with mode: 0644]
library/authentication/privDB.php [new file with mode: 0644]
library/authentication/rsa.php [new file with mode: 0644]
library/classes/Installer.class.php
library/globals.inc.php
library/js/crypt/jsbn.js [new file with mode: 0644]
library/js/crypt/rsa.js [new file with mode: 0644]
patients/get_allergies.php
patients/get_appointments.php
patients/get_lab_results.php
patients/get_medications.php
patients/get_patient_info.php
patients/get_problems.php
patients/index.php
patients/summary_pat_portal.php
patients/verify_session.php [new file with mode: 0644]
setup.php
sql/4_1_1-to-4_1_2_upgrade.sql
sql/database.sql
version.php