Secondary Password

[kornom]

What happens if a player forgets it? How can it be recovered?

[UnAfraid]

You should manage that in your web site.

[kornom]

Are there any scripts? Anything already made?
And where are those passes are saved?

[Zealar]

In your Database in table "accounts" there is column called "password". So you can manually change it ofc need to use server encryption methods.

[kornom]

In your Database in table "accounts" there is column called "password". So you can manually change it ofc need to use server encryption methods.

This is the ACCOUNT password, there should be a separate pswrd for characters

[Zealar]

That start sound me like something custom. Where is that second password ? I remember H5 got only 1 password and is account one.

[kornom]

That start sound me like something custom. Where is that second password ? I remember H5 got only 1 password and is account one.

lol you are custom, it is in configs.

[lucan]

I think he is talking about the PIN number of the H5.

[Zoey76]

Character numeric password is a GOD feature.

[NosBit]

Character numeric password is a GOD feature.

We have it implemented and its supported by H5 client without any client modification...
com.l2jserver.gameserver.security.SecondaryPasswordAuth

The password is stored in game server database in table 'account_gsdata' at var 'secauth_pwd' and its encrypted using sha1 and Base64,

Code: Select all

MessageDigest md = MessageDigest.getInstance("SHA");byte[] raw = password.getBytes("UTF-8");byte[] hash = md.digest(raw);return Base64.getEncoder().encodeToString(hash);

[Zoey76]

Doesn't it crash the client?

[kornom]

Doesn't it crash the client?

Works just fine actually, the only thing I wonder about is if there any script that someone made that I could use for implementation to my web for char password recovery?