WP_DEBUG – PHP Deprecated: crypt()

thankyou

Heya!

Sorry I just saw this. I want to do a release soon. I’ll fix it by then. I opened an issue on GitHub: https://github.com/carlalexander/passwords-evolved/issues/7

thanks!

Heya @cliffpaulick!

So looking at this, I’ll need more information about the issue. It seems like the password checker falls back to the default WordPress one. So that tells me that the plugin couldn’t detect the hashing algorithm.

Could you share the starting part of the hashed password when this happened. For example, a bcrypt password starts with $2b$10$.

This would help me see what might have happened.

I’m unsure which site this was for but I’ll update you if I find out. I’d guess not very soon though.

OK, got it on a site with latest versions of WP core and plugins:

PHP Deprecated: crypt(): Supplied salt is not valid for DES. Possible bug in provided salt format. in /wp-includes/class-phpass.php on line 272
PHP Stack trace:
PHP 1. {main}() /wp-login.php:0
PHP 2. wp_signon() /wp-login.php:1128
PHP 3. wp_authenticate() /wp-includes/user.php:95
PHP 4. apply_filters() /wp-includes/pluggable.php:582
PHP 5. WP_Hook->apply_filters() /wp-includes/plugin.php:212
PHP 6. wp_authenticate_username_password() /wp-includes/class-wp-hook.php:292
PHP 7. wp_check_password() /wp-includes/user.php:170
PHP 8. PasswordsEvolved\Password\Hasher\PasswordHasherChain->is_password_valid() /wp-content/plugins/passwords-evolved/pluggable.php:35
PHP 9. array_reduce() /wp-content/plugins/passwords-evolved/src/Password/Hasher/PasswordHasherChain.php:93
PHP 10. PasswordsEvolved\Password\Hasher\PasswordHasherChain->PasswordsEvolved\Password\Hasher\{closure:/wp-content/plugins/passwords-evolved/src/Password/Hasher/PasswordHasherChain.php:87-93}() /wp-content/plugins/passwords-evolved/src/Password/Hasher/PasswordHasherChain.php:93
PHP 11. PasswordsEvolved\Password\Hasher\WordPressPasswordHasher->is_password_valid() /wp-content/plugins/passwords-evolved/src/Password/Hasher/PasswordHasherChain.php:89
PHP 12. PasswordHash->CheckPassword() /wp-content/plugins/passwords-evolved/src/Password/Hasher/WordPressPasswordHasher.php:68
PHP 13. crypt() /wp-includes/class-phpass.php:272

So I tried to replicate using the only login I use on this site and couldn’t… so I tried purposefully incorrect password (failed login attempt) and that didn’t trigger it either.

The only thing I can think of is when I cloned the site (latest version of Local Flywheel, nginx, PHP 7.4.1) as a blank start and then imported an All-in-One WP Migration export file, then trying to login with the correct credentials says cookies in my browser are disabled (which they’re not) – and I clear the site’s cookies/cache and then my same credentials work.

So maybe it’s during that cache/cookie error thing that this notice generates in debug.log?

Screenshot of all passwords in my database: https://share.getcloudapp.com/WnuYgd1Y

Does any of this help?