[SECURITY] keep up with modern password hashing standards

1 files changed, 6 insertions, 1 deletions

diff --git a/install.php b/install.php
index 95caf8ec..5a2d724a 100644
--- a/install.php
+++ b/install.php
@@ -1,10 +1,12 @@
 <?php
 
 // Installation/upgrade file	
-define('VERSION', '4.9.93');
+define('VERSION', '5.0.0');
 
 require 'inc/functions.php';
 
+loadConfig();
+
 $step = isset($_GET['step']) ? round($_GET['step']) : 0;
 $page = array(
 	'config' => $config,
@@ -551,6 +553,9 @@ if (file_exists($config['has_installed'])) {
                         foreach ($boards as &$board) {
                                 query(sprintf('ALTER TABLE ``posts_%s`` ADD `slug` VARCHAR(255) DEFAULT NULL AFTER `embed`;', $board['uri'])) or error(db_error());
 			}
+                case '4.9.93':
+                        query('ALTER TABLE ``mods`` CHANGE `password` `password` VARCHAR(255) NOT NULL;') or error(db_error());
+                        query('ALTER TABLE ``mods`` CHANGE `salt` `salt` VARCHAR(64) NOT NULL;') or error(db_error());
 		case false:
 			// TODO: enhance Tinyboard -> vichan upgrade path.
 			query("CREATE TABLE IF NOT EXISTS ``search_queries`` (  `ip` varchar(39) NOT NULL,  `time` int(11) NOT NULL,  `query` text NOT NULL) ENGINE=MyISAM DEFAULT CHARSET=utf8;") or error(db_error());