For which operations uses PrestaShop secure_key?

[danielsk]

Hi,

 

I would like to understand, how important is secure_key for PrestaShop.

 

For example: Can I change it without worrying?

 

I am copying database table "customer" to the new empty shop, and I am not sure, if secure_key is an random value, and I can use the old ones. (I know, that I need to modify the file settings.inc.php, when I want to use old passwords.)

 

Thanks.

[tuk66]

I think it is a random hashed string created when the new customer is added to the shop. This key is used in the cart and payment modules to validate the customer.

 

Using the old ones should be all right.

[vekia]

these values are for security purposes, each shop installation has got different keys.

usually, these keys are used for "salting" passwords: http://en.wikipedia.org/wiki/Salt_(cryptography)

 

each password with salt is almost impossible to break, even if hackers trying to use brute force method based on rainbow tables http://en.wikipedia.org/wiki/Rainbow_table

 

if you want to use old passwords (from other store) in other prestashop installation, you will have to use old security keys,

there is no other method. But beware! after change keys you will need to regenerate admin passwords (and each employee too)

[danielsk]

  On 10/1/2013 at 11:02 AM, vekia said:

these values are for security purposes, each shop installation has got different keys.

usually, these keys are used for "salting" passwords: http://en.wikipedia.org/wiki/Salt_(cryptography)

 

each password with salt is almost impossible to break, even if hackers trying to use brute force method based on rainbow tables http://en.wikipedia.org/wiki/Rainbow_table

 

if you want to use old passwords (from other store) in other prestashop installation, you will have to use old security keys,

there is no other method. But beware! after change keys you will need to regenerate admin passwords (and each employee too)

 

Thank you very much. Your informations are exactly what I was looking for. Thanks.