3

I need to import customers from the other shop system (oxid e CE) to Magento 1.9. The best result would be reusing their password, so the customers can log in with their existing data into the new shop.

As far as I know, oxid uses md5 hash plus salt for encryption. Is it possible to use these both fields to generate a md5 hash that Magento can use?

If not possible, I would try to display a message on login attempt for the imported customers that they will receive a mail with a link to reset their password. What would be the best approach for this method?

I think something like to pre-dispatch the login event and to check if this customer is one of the imported and has not reset his password.

Improve this question
4
  • If you save password just in md5 ,magento will accept and customer can login into your site
    – Minesh Patel
    Commented Oct 17, 2015 at 10:43
  • Is there any way to combine the md5 hash and the salt to achieve this?
    – Nirmi
    Commented Oct 17, 2015 at 11:34
  • well i am not sure about that, your can check in core class for more details
    – Minesh Patel
    Commented Oct 17, 2015 at 11:37
  • ok will have a look. if i found something ill post that here
    – Nirmi
    Commented Oct 17, 2015 at 17:57

1 Answer 1

Reset to default
1

If you tell us how OXID is hashing the passwords, we might help you.

Magentos passwords look like this:

$this->hash($salt . $password) . ':' . $salt

An example: 027dfe2d795846ea0687514b0338d464:zj in newer Versions, the hash is longer. It is important to see, that there is no seperator between salt and password and salt comes first.

In CE $this->hash() is md5() in EE it is some sha function.

Long story short: If OXID is hashing the same way you can just import the passwords, if it doesn't have a look into https://github.com/ikonoshirt/pbkdf2. I implemented an more secure way for password storing with PBKDF2 and for this I implemented a migration path to check wether the password is stored the new or the old way, you can use the same technique.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.