www programming

[color=#408000][size=150][b]WP_w3all 1.6.3 has been released and fix definitively the password problem.[/b][/size][/color]

the problem has been resolved and fixed on next coming soon 1.6.3.

the question has been fortunately kindly answered at phpBB.com:
[quote]phpBB no longer uses phpass, though we never supported the blowfish format of phpass. In phpBB 3.1, we moved to bcrypt and continue to use it: https://github.com/phpbb/phpbb/blob/3.2 ... bcrypt.php
While phpBB can support the $2a$ format of bcrypt, yours uses a cost factor of 8, while we require one of at least 10. That would cause the password hash to be recomputed and converted to the $2y$ format, which Wordpress would not be able to use.[/quote]
[url]
https://www.phpbb.com/community/viewtopic.php?f=556&t=2410311&p=14662636#p14662636[/url]

[size=120][b]Test Pass:[/b][/size]
zVg%)4hK$wvDhEmr^?=)&

[b]changed/hashed on WP[/b] (updated, result same on both):

$2a$08$2aCqkcJYCM9lcUaZopqz2usSZoIb.Tw/Cj1e.1D8N7oWQzB4g7a1q
$2a$08$2aCqkcJYCM9lcUaZopqz2usSZoIb.Tw/Cj1e.1D8N7oWQzB4g7a1q

[b]work if login on WP, fail phpBB[/b]


[b]changed/hashed in phpBB[/b] (updated, result same on both with same test pass):

$2y$10$PCfuM2rQOTJNfJ01Ms0hfeSkGPnq9pVZ6/WIOvj/eUTGYpKha9i0O
$2y$10$PCfuM2rQOTJNfJ01Ms0hfeSkGPnq9pVZ6/WIOvj/eUTGYpKha9i0O

[b]work if login phpBB, not work if login WP[/b]

[size=120]
password change in phpBB OR WP, a [b]different pass like this (that not contain some chars type, and is correctly updated also in this case)[/b]:[/size]
[size=120][b]Test Pass:[/b][/size]
zVg%)4hK$wvDhEm

Hashed and respectively tested on both:
[size=120][b]work on both[/b][/size]. Anyone have an idea?

^

I've find out that there is still a problem about password when we go to change it in WP profile.
If it contain characters like [code]^[/code] the pass fail to be recognized in phpBB (if i try to login with this pass in phpBB). And viceversa.

[size=120][b]the interesting is that hashes are correctly stored as same in any case. That let me at moment really confused.[/b][/size]
anyone know how this could never happen?

When pass are changed, are correctly updated on both WP and phpBB (if on WP on fly, if done in phpBB when user come to login or as logged visit wp).

[b][i]Added: but look below what happen, and why passwords aren't correctly recognized if:[/i][/b]

(1.6.2 has just been released in the while)...