+1-888-365-2779
Try Now
More in this section

Forums / Security / Migration from Sitefinity to WordPress

Migration from Sitefinity to WordPress

8 posts, 0 answered
  1. Todd Atkins
    Todd Atkins avatar
    5 posts
    Registered:
    24 Mar 2010
    25 Mar 2010
    Link to this post
    We're currently enhancing a site to include a WordPress blog (LAMP stack). We need to give our members access to the blog and for a number of reasons, we really don't want to force the members to re-set or change their password. We can easily handle copying data from the telerik_Users database into the WordPress users database. However, as I understand it, the passwords in telerik_Users are encrypted with a SHA1 hash with salt. I believe WordPress uses md5 with salt.
    We're pretty sure we can modify the encryption algorithm in WordPress to use SHA1, but is there any documentation available on the Sitefinity salt algorithm? Can anyone verify that this is how Sitefinity encrypts passwords for users?
    We're not looking to decrypt passwords, we just want to allow the members to use their existing login information in WordPress. We're totally open to any other ideas out there on how to preserve the user's passwords. As I said, resetting passwords is not an option.

    Thanks!
  2. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    09 Dec 2016
    25 Mar 2010
    Link to this post
    Hi Todd Atkins,

    We use RNGCryptoServiceProvider for the salt and then convert the value to ToBase64String.

    Greetings,
    Ivan Dimitrov
    the Telerik team

    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items.
  3. Todd Atkins
    Todd Atkins avatar
    5 posts
    Registered:
    24 Mar 2010
    26 Mar 2010
    Link to this post
    Thank you for this information.

    We understand all of the processes and have all of the data needed, except...

    We need the formula for how the salt is combined with the hash to produce the final 'hash' stored in the DB

    Thanks so much for your help.
  4. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    09 Dec 2016
    26 Mar 2010
    Link to this post
    Hello Todd Atkins,

    The paramaters that are used are password, passwordFormat and salt. Then we create HashAlgorithm

    Sincerely yours,
    Ivan Dimitrov
    the Telerik team

    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items.
  5. Todd Atkins
    Todd Atkins avatar
    5 posts
    Registered:
    24 Mar 2010
    26 Mar 2010
    Link to this post
    Thank you once again, however we need more information than this.

    How are these three elements combined to generate the hash - can you please provide us with a step by step algorithmic explanation?

    Thanks for your help!
  6. Todd Atkins
    Todd Atkins avatar
    5 posts
    Registered:
    24 Mar 2010
    26 Mar 2010
    Link to this post
    can you give me a call?

    303-395-1880 x1 x2
  7. Todd Atkins
    Todd Atkins avatar
    5 posts
    Registered:
    24 Mar 2010
    26 Mar 2010
    Link to this post
    or if you could simply share the code that does this we could figure out how to make it work in another language.

    Thanks!
  8. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    09 Dec 2016
    26 Mar 2010
    Link to this post
    Hi Todd Atkins,

    You could reflect Telerik.DataAccess.AspnetProviders.TelerikMembershipProvider class.

    Greetings,
    Ivan Dimitrov
    the Telerik team

    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items.
Register for webinar
8 posts, 0 answered