Symfony sfDoctrineGuard Password Encryption

Question

I have a Symfony 1.4 app using sfDoctrineGuardPlugin for users.

I need to move these users to a new system. After going through the documentation and code, I'm having trouble understanding how Symfony stores/checks passwords.

I want my new system (CakePHP) to store and check passwords the same way the old one does, so that nobody has to change their password.

How would I go about this? Can someone post a simple example?

Answer 1

I think you just have to dig into the code, when sfGuard generate the password (setPassword) and when sfGuard check the password (checkPasswordByGuard).

They use an algorithm (by default sha1) to store the password which is salted.