Merge pull request #9 from clach04/patch-1

clarify password hashing

FossilOrigin-Name: 3e8d9fc26801b77a45dcccb723d426e8344185c034ab9b95289e0cd2b683bc1e
This commit is contained in:
bohwaz@users.noreply.github.com 2023-04-02 15:56:49 +00:00
commit e2d525e268

View file

@ -71,9 +71,9 @@ password = verySecret
write = true
```
Note that PicoDAV will replace this password with an encrypted version the next time it is accessed, don't worry about that, this is for extra safety, just in case the `.picodav.ini` is accessed by a hacker if you made mistake in your web server configuration.
Note that PicoDAV will replace this password with a hashed version the next time it is accessed, don't worry about that, this is for extra safety, just in case the `.picodav.ini` is accessed by a hacker if you made mistake in your web server configuration.
Here is an example of the password once it has been encrypted:
Here is an example of the password once it has been hashed:
```
password = '$2y$10$fbdabTjNPN3gMAUlaSEoR.kKHLnh0yMGneuJ7P2AOhSSNr8gUaCPu'