I updated my OSClass from ancient 3.9.0 to 8.2      The old OSclass wasn't sending emails so I needed to upgrade OSCLass in hopes it would fix the email issue.

To update OSClass, I did a fresh install from 8.2 onto my server.   I then manually imported the data.

It's all working well except passwords created under the old version (3.9.0) do not work with (8.2).

Here's my SQL

INSERT INTO `oc_t_admin` (`pk_i_id`, `s_name`, `s_username`, `s_password`, `s_email`, `s_secret`, `b_moderator`, `s_moderator_access`, `i_login_fails`, `dt_login_fail_date`) VALUES
(1, 'Administrator', 'admin', '$2y$15$eEJ65LmeUMoewerkOrUlb.BJY3JPrTy.FeCN9WNojK8C9cBKZ08ZC', '[email protected]', NULL, 0, NULL, 0, NULL),
(2, 'Admin2', 'Admin2', '$2y$15$Dz7eLHVjj/t1nEQl7llXueDTrz.9UWVSzEbJ/.FRxSlyL7zbt42Cq', '[email protected]', NULL, 0, '', 0, NULL);

The first entry was created during the fresh install and I can login to "admin" fine.
The second entry is from my old installation that I exported.   That login does not work.

So my question is what has changed in the password algorithm in the newer version?
My old OSClass (3.9.0) is working just fine in an older folder.  The new install does like my old passwords I inserted.

Is there a fix for this or do I just blow out all users passwords and make them reset?

It might.
You can reset your admin password on ocadmin login page

I can reset MY admin password.    Actually, when I installed OSclass it created an admin password that works.

The problem isn't the admin access.   That I can fix.

It's the 500 users' passwords that when imported from the old version don't work.

They could do the same, but I do not remember that passwords would be invalided on update.
Maybe newer version of osclass just use different hash function that cause this problem,..but do not recall anything like that

I couldn't update OSclass from 3.9.0    it didn't work at all.   Probably too many differences.

Importing the admin table, I copied the admin record the NEW install created and added my old admin record.   The new worked fine, the old would not.

I'm thinking the Hash routine is different.


I hate to force all my users to redo their passwords.

Is there a way to display a message like

"All users, passwords have all been lost, can you please reset your password using ~~ this link?"

Osclass can be upgraded from v3.0 up to 8.3, all update steps are preserved and executed one by one in sequence.

Mail them - bla bla bla to improve security and secure your data, all passwords were cleaned and require reset from user side.