improve password storage (use sha256 and long random salt)

bump schema

4 files changed, 24 insertions, 2 deletions

diff --git a/schema/ttrss_schema_mysql.sql b/schema/ttrss_schema_mysql.sql
index 04fa7f0de..e2815bf8b 100644
--- a/schema/ttrss_schema_mysql.sql
+++ b/schema/ttrss_schema_mysql.sql
@@ -44,6 +44,7 @@ create table ttrss_users (id integer primary key not null auto_increment,
 	full_name varchar(250) not null default '',
 	email_digest bool not null default false,
 	last_digest_sent datetime default null,
+	salt varchar(250) not null default '',
 	created datetime default null,
 	twitter_oauth longtext default null,
 	index (theme_id)) ENGINE=InnoDB DEFAULT CHARSET=UTF8;
@@ -259,7 +260,7 @@ create table ttrss_tags (id integer primary key auto_increment,
 
 create table ttrss_version (schema_version int not null) ENGINE=InnoDB DEFAULT CHARSET=UTF8;
 
-insert into ttrss_version values (87);
+insert into ttrss_version values (88);
 
 create table ttrss_enclosures (id integer primary key auto_increment,
 	content_url text not null,
diff --git a/schema/ttrss_schema_pgsql.sql b/schema/ttrss_schema_pgsql.sql
index 917b48400..ba239fc69 100644
--- a/schema/ttrss_schema_pgsql.sql
+++ b/schema/ttrss_schema_pgsql.sql
@@ -41,6 +41,7 @@ create table ttrss_users (id serial not null primary key,
 	full_name varchar(250) not null default '',
 	email_digest boolean not null default false,
 	last_digest_sent timestamp default null,
+	salt varchar(250) not null default '',
 	twitter_oauth text default null,
 	created timestamp default null);
 
@@ -228,7 +229,7 @@ create index ttrss_tags_post_int_id_idx on ttrss_tags(post_int_id);
 
 create table ttrss_version (schema_version int not null);
 
-insert into ttrss_version values (87);
+insert into ttrss_version values (88);
 
 create table ttrss_enclosures (id serial not null primary key,
 	content_url text not null,
diff --git a/schema/versions/mysql/88.sql b/schema/versions/mysql/88.sql
new file mode 100644
index 000000000..0abb2ab33
--- /dev/null
+++ b/schema/versions/mysql/88.sql
@@ -0,0 +1,10 @@
+begin;
+
+alter table ttrss_users add column salt varchar(250);
+update ttrss_users set salt = '';
+alter table ttrss_users change salt salt varchar(250) not null;
+alter table ttrss_users alter column salt set default '';
+
+update ttrss_version set schema_version = 88;
+
+commit;
diff --git a/schema/versions/pgsql/88.sql b/schema/versions/pgsql/88.sql
new file mode 100644
index 000000000..df6ec8fb7
--- /dev/null
+++ b/schema/versions/pgsql/88.sql
@@ -0,0 +1,10 @@
+begin;
+
+alter table ttrss_users add column salt varchar(250);
+update ttrss_users set salt = '';
+alter table ttrss_users alter column salt set not null;
+alter table ttrss_users alter column salt set default '';
+
+update ttrss_version set schema_version = 88;
+
+commit;