Search code examples
phpazerothcore

How are passwords encrypted in AzerothCore? Is it same as Trinitycore?

I am trying to build a web portal which is using SOAP RBAC (3.3.5a) to communicate between wow server and web portal.

What encryption is AzerothCore using? Is it same as Trinity?

I tried using other CMS existing FusionGen and github and looking at login and registration system. They all base on trinity.

But it seems its not actually same somehow.

Any help is appreciated

Solution

  • AzerothCore uses the same strategy of all MaNGOS-based game servers. So, yes, it's the same as in TrinityCore too.

    Passwords are encrypted using the SHA1 hash function with the format: account:password in uppercase.

    So if your account is squeeze and your password is azeroth, it will be encrypted in SHA1('SQEEZE:AZEROTH').

    The password will be stored in the sha_pass_hash field of the account table inside the acore_auth database.

    SQL code

    SELECT SHA1(CONCAT(UPPER('your_username'), ':', UPPER('your_password')))

    PHP code

    sha1(strtoupper($username).':'.strtoupper($password));