Error after updating with password_hash_algorithm

FMTHouston · June 8, 2021, 10:12pm

After updating I am getting the following error. Will not let you login.
Error : invalid password_hash_algorithm
any ideas how to correct?

Lukas · June 9, 2021, 9:32am

Hi,

Can you make sure your config/global.ini.php looks exactly like this file:

github.com

matomo-org/matomo/blob/4.3.1/config/global.ini.php#L411


; For legacy data, fallback or non-security scenarios, we use md5.
hash_algorithm = whirlpool
; set the algorithm used by password_hash()
; "default" for the algorithm used by the PHP version or one of ["bcrypt", "argon2i", "argon2id"]
; "argon2id" requires at least PHP 7.3.0
; for all argon2 algorithms, additional parameters can be changed below
; any changes are applied to the stored hash on the next login of a user
; see https://www.php.net/manual/en/function.password-hash.php and https://wiki.php.net/rfc/argon2_password_hash
; for more information
password_hash_algorithm = default
; The number of CPU threads used for calculating the hash
password_hash_argon2_threads = default
; The amount of memory (in KB) used for calculating the hash
; a minimum of 8 times the number of threads
password_hash_argon2_memory_cost = default
; The number of iterations for calculating the hash
password_hash_argon2_time_cost = default

especially around line 411.

Maybe the update didn’t complete and didn’t overwrite this file, in which case you should replace it with the correct one.