__NOTOC__
{{Shared function}}
{{Note box|Using '''passwordHash''' is the recommended way of storing passwords.}}
{{New feature/item|3.0154|1.5.4|11277|
This function creates a new password hash using a specified hashing algorithm.
}}

{{Warning|It is strongly recommended to use the async version of the function (i.e. provide a callback function). Otherwise, you will experience short freezes due to the slow nature of the bcrypt algorithm}}
==Syntax==
<syntaxhighlight lang="lua">
string passwordHash ( string password, string algorithm [, table options = {} ][, function callback ])
</syntaxhighlight>

===Required Arguments===
*'''password:''' The password to hash.
*'''algorithm:''' The algorithm to use:
** ''bcrypt'': use the bcrypt hashing algorithm. Hash length: 60 characters. Note that only the prefix ''$2y$'' is supported (older prefixes can cause security issues).

===Optional Arguments===
*'''options:''' table with options for the hashing algorithm, as detailed below
{{New feature/item|3.0154|1.5.4|11281|
*'''callback:''' providing a callback will run this function asynchronously, the arguments to the callback are the same as the returned values below.
}}
===Options for each hashing algorithm===
* ''bcrypt'':
** ''cost'' (int), default: 10. Visit [http://security.stackexchange.com/questions/17207/recommended-of-rounds-for-bcrypt this link] to determine the number of rounds appropriate for your server.
** ''salt'' (string), default: automatically generate salt
*** an empty string will automatically generate a salt with the ''cost'' provided
*** if a string is provided, the given salt is used (do not do this!)
*** the provided string should be longer or equal than 22 characters

===Returns===
Returns the hash as a string if hashing was successful, ''false'' otherwise. If a callback was provided, the aforementioned values are arguments to the callback, and this function will always return ''true''.

==Example==
{{Warning|If you will be using "Example 1" then you will have to save account data "hash_password" after server restart, otherwise this script will no longer work.}}
This example makes use of [https://wiki.multitheftauto.com/wiki/PasswordHash passwordHash] and [https://wiki.multitheftauto.com/wiki/PasswordVerify passwordVerify] in account creation and account login to boost up security.
<section name="Example 1" class="server" show="true">
* Use '''</accountCreate [username] [password]>''' to create an account.
* Use '''</accountLogin [username] [password]>''' to login in account.
<syntaxhighlight lang="lua">
-- lets add command handler that will handle the account creation
addCommandHandler("accountCreate",function(source,cmd,username,password)
if (username and password) then
local hashedPassword = passwordHash(password,"bcrypt") -- create new hash for password
if (hashedPassword) then -- check if hash has been generated
local account = addAccount(username,hashedPassword) -- now lets add account with new hash what we got when we made it for password.
if (account) then
setAccountData(account,"hash_password",hashedPassword) -- store accounts password hash in order to verify it when it's needed.
outputChatBox("Account successfuly created! Now please login. Syntax </accountLogin [username] [password]>",source,20,160,20)
else
outputChatBox("Account already exists! Please try again with different username.",source,20,160,20)
end
else
outputChatBox("Securing your password failed! Please try again or contact an administrator.",source,160,20,20)
end
else
outputChatBox("Wrong parameters! Correct Syntax </accountCreate [username] [password]>",source,160,20,20)
end
end);

-- lets add command handler that will handle the account login
addCommandHandler("accountLogin",function(source,cmd,username,password)
if (username and password) then
local account = getAccount(username) -- get entered account
if (account) then -- check if entered account exists
local hashedPassword = getAccountData(account,"hash_password") -- lets get hashed password
if (passwordVerify(password,hashedPassword)) then -- check if hash and entered password matches
if logIn(source,account,hashedPassword) then -- now lets login player into account
outputChatBox("Login successfull. Welcome, "..getAccountName(account).."!",source,20,160,20)
end
else
outputChatBox("Password is incorrect!",source,160,20,20)
end
else
outputChatBox("Account doesn't exist! Please try again with different account.",source,160,20,20)
end
else
outputChatBox("Wrong parameters! Correct Syntax </accountCreate [username] [password]>",source,160,20,20)
end
end);
</syntaxhighlight>
</section>

==See Also==
{{Utility functions}}

2017-04-20T21:02:07Z

{{Changelogs}}
__NOTOC__

* Changelog on Mantis: https://bugs.mtasa.com/changelog_page.php
* Full changelog: https://github.com/multitheftauto/mtasa-blue/commits/master?page=1

== Main Additions / Changes ==
* Security tweaks for both server and client
* Enabled ''Authorized Serial Protection'' by default

== Scripting ==

=== Client ===
* Added "sniper moon", "random foliage" and "extra air resistance" properties to [[setWorldSpecialPropertyEnabled]] (thanks to '''ZReC''')
* Added [[getVehicleLODDistance]] and [[setVehicleLODDistance]] (thanks to '''lopezloo''')

=== Server ===

=== Shared (''Client & Server side'') ===
* Added [[passwordHash]] and [[passwordVerify]]
* Added ''queue'' name parameter to [[fetchRemote]] to support parallel downloads
* [[setElementDimension]] now supports element omnipresence, which means that an element can be in all dimensions at once (thanks to '''zneext''')

== Client ==

=== Client: Additions ===

=== Client: Bugfixes & Changes ===
* Corona markers should now have a correct attach offset position (thanks to '''lopezloo''')
* Fixed very lage radar areas not being visible (thanks to '''ZReC''')
* Disabled CEF sandbox due to problems (might be re-enabled soon)
* Updated CEF and other 3rd party dependencies
* Fixes for some crashes and improvements for error handling for installation and startup issues
* Removed max password length limit for server account passwords (thanks to '''4O4''')
* Improved multi-monitor support in windowed fullscreen mode
* Improved performance of [[dxGetPixelsSize]]
* Tweaked joystick support

== Server ==

=== Server: Additions ===
* Added ''fakelag'' command
* Added option to allow locally modified (gta3.img) vehicles

=== Server: Bugfixes & Changes ===
* Enabled ''Authorized Serial Account Protection'' by default
* Enabled ''Database Credentials Protection'' by default
* Fixes for weapons/fists desync
* SQLite or MySQL no longer makes the server freeze if the connection is lost
* Goggles no longer stay after player was killed (thanks to '''ArranTuna''')
* Fixed console input via pipe on Windows

== Resources ==
* various changes in acpanel, editor, freeroam, killmessages, playerblips, race and webbrowser

== Editor ==

== Extra information ==
''More detailed information available on [https://bugs.multitheftauto.com/changelog_page.php Bug tracker Changelog] and GitHub repositories:
:* [https://github.com/multitheftauto/mtasa-blue MTA: SA Blue]
:* [https://github.com/multitheftauto/mtasa-resources MTA: SA Official Resources]

[[Category:Changelog]]
[[Category:Incomplete]]

2016-09-12T21:21:17Z

Jusonex:

{{Changelogs}}
__NOTOC__

* Changelog on Mantis: https://bugs.mtasa.com/changelog_page.php
* Full changelog: https://github.com/multitheftauto/mtasa-blue/commits/master?page=1

== Main Additions / Changes ==
* Significantly reorganized build system
* A lot code cleanups
* Fixed multiple popular crashes
* Improved streaming of low LOD objects and increased limits
* Provided a separate release branch for XP and Vista (new Chromium versions are no longer supported on XP and Vista)

== Scripting ==

===Client===
* Added [[canBrowserNavigateBack]], [[canBrowserNavigateForward]], [[navigateBrowserBack]], [[navigateBrowserForward]], [[reloadBrowserPage]] (thanks to '''mabako'''!)
* Added [[resizeBrowser]]
* Added [[getTrainTrack]] and [[setTrainTrack]]
* Added [[setVehicleWindowOpen]]
* Added alternative syntax to [[guiGridListAddRow]] and [[guiGridListInsertRowAfter]]

=== Server ===
* Added support for multiple statements in [[dbQuery]]/[[dbExec]]
* Added manuallyChanged parameter to [[onPlayerChangeNick]]
* Added [[onPlayerWeaponFire]] (thanks to '''lopezloo''')
* Added [[getCommandHandlers]] (thanks to '''zneext''')

=== Shared (''Client & Server side'') ===
* Fixed fileRead crashing when reading more than 10000 bytes
* Added [[fileGetPath]]
* Added option for addDebugHook to skip event/functions
* Added duplicate log line filter for script debugging
* Improved internal error logging
* Added [[inspect]], [[iprint]] and [[getUserdataType]]
* setVehiclePlateText now works with any kind of vehicle, including motorbikes (thanks to '''lopezloo''')
* Added blend parameter for setPedAnimation (thanks to '''lex128''')

== Client ==

=== Client: Additions ===
* Enabled code signing for ''CEFLauncher.exe'' to improve anti virus software compatibility
* Added client resource files path info to Advanced tab
* MTA uses the native resolution by default now
* Security tweaks
* Added support for objects and weapons in ped damage events (thanks to lopezloo)
* Added 236 new ped skin ID's which allow servers to apply mods onto them: [[Character_Skins]]
* Added option for [[addDebugHook]] to skip event/functions
* [[onClientVehicleStartEnter]] is now cancellable if the local player is entering the vehicle
* Water elements are now limited to a specific dimension
* Made Lua clear loaded files automatically when dereferenced
* Tweaked CEF performance significantly
* Improve linux compatibility

=== Client: Bugfixes & Changes ===
* Removed VS2008 redistributable from installer as it is no longer required
* Fixed setBrowserAjaxHandler breaking JSON decoding (thanks to '''mabako''')
* Updated CEF
* Tweaked optimus detection
* Added missing model name for model 6458
* Fixed LOD object issues (see https://bugs.mtasa.com/view.php?id=9242)
* Fixed colshape related crashes (thanks to lopezloo)
* Tweaked logic of client resource file validation
* Fixed setBrowserAudio not muting the sound correctly on some websites e.g. YouTube
* Fixed client incorrectly handling 'no' answer to recommended update question
* Fixed self-created water becoming invisible sometimes (thanks to '''lopezloo''')
* Fixed setCameraTarget calculation (thanks to lex128)
* Fixed [[getCommandsBoundToKey]] incorrectly handling keys sometimes (thanks to Necktrox)
* Fixed sniper scope disappearing after killing a ped (thanks to lopezloo)
* Fixed team members not fully synced until re-set by setPlayerTeam or respawn
* Fixed MTA sometimes not loading custom textures
* Deprecated [[showPlayerHudComponent]]
* Fixed redirectPlayer with an empty host logging ambiguously
* Fixed a 1-frame lag of attachElements
* Changed setElementFrozen to not recreate the object

== Server ==

=== Server: Additions ===
* Added icon for the Windows server
* Added server logging for redirectPlayer

=== Server: Bugfixes & Changes ===
* Fixed compatibility issues on older CPU architectures
* Fixed modules being broken for some revisions
* Removed warnings for .png files with JPEG contents
* Changed remaining <min_mta_version> errors to warnings
* Changed server private IP error to a warning
* Fixed dbPoll returning early when timeout is used
* Fixed a connecting player being able to block resources from starting
* Fixed server crash when using db* functions during onDebugMessage event
* Fixed onElementStopSync not being triggered when player disconnects
* Fixed Fire Extinguisher not triggering onPedWasted
* Fixed getMarkerIcon returning the marker type
* Fixed protected resources being stoppable

== Resources ==
* None yet

== Editor ==
* None yet

== Extra information ==
''More detailed information available on [https://bugs.multitheftauto.com/changelog_page.php Bug tracker Changelog] and GitHub repositories:
:* [https://github.com/multitheftauto/mtasa-blue MTA: SA Blue]
:* [https://github.com/multitheftauto/mtasa-resources MTA: SA Official Resources]

[[Category:Changelog]]
[[Category:Incomplete]]