No, I don't.

Probably ...

You can add a column "hashed_password" as a shadow to the right table, and hash all "plain_password" and gradually double all password write and reads in the code.

At the end delete or rename the plain_password field and "deactivate" all code referencing it. ¹

But that's something you gods must discuss!

Update

¹) I'd probably encapsulate all this in two custom functions "store_password" and "check_password" which are ruled by a global switch.

First time users get an automatically generated cryptic password.

You could reuse this.

Problem is you can't overwrite the old password yet, because you can't know who requested the reset.

You'll need a page password_reset asking for the reset_password which is stored separately.

Additionally you need a timestamp and a counter to limit the numbers of requests.

Otherwise an attacker could spam a user with useless requests. (Tho he needs to know the name of the account and the email to do so)

Update

In hindsight, the code creating a new user should already have a mechanism to block spamming an email by restricting the number of attempts.

I tried to look into Create A New User, but it wasn't evident for me if that's already handled.

FWIW: I've found multiple SQL-tables with passwd fields like
• user
• emailpwd
• newuser
• ...
and even after hours (!) of searching I wasn't able to understand the "New User" "Mail Passwd" process.

And there doesn't seem to be a possibility for pmdevs to search inside dbtables nodes, so there is probably more.

Hashing the passwords will require patching the core modules in the Everything:: namespace.

Especially the opLogin() routine and internally called subs, but also those forks generated by other gods like loginx() (why???)

(FWIW looking into some code with 1999 security standards gave me the shills.)

Even if I went on now and installed an Everything.pm fork locally on my box, "assimilated" some parts from PM to make it coherent and created a working proof of concept there is no guaranty it would be accepted.

Long story short, after spending a lot of time digging inside the guts, I'm pretty sure only the gods can fix this. And only after they agreed to do so.

Making this work is realistically beyond the possibilities of a pmdev

Cheers Rolf
_{(addicted to the Perl Programming Language :)
see Wikisyntax for the Monastery}

PS: I'm not applying for a promotion, even temporarily...

welcome to our world. Do you think it’s any easier for us to understand?

I thank you for looking into it. I feel like you have validated our long-term collective reluctance to do anything about it.