Login impossible after upgrade to V3

I just upgraded from 2.11.6 to 3.0.0 and the installation of the new version seemed to have run smoothly except for this:

[attachment=0:7ymciy8q]ContaoV3.jpg[/attachment:7ymciy8q]

However, I cannot login to backend anymore. Even if I force-change the admin password using PhpMyAdmin, I'm able to log once, but the second time, the password doesn't work any longer (and now I have tried to reupgrade a second time from previous version, that doens't seem to work any longer).

In case that could help, here is the content of the localconfig file :

Code:

---

<?php

### INSTALL SCRIPT START ###
$GLOBALS['TL_CONFIG']['licenseAccepted'] = true;
$GLOBALS['TL_CONFIG']['websitePath'] = '';
$GLOBALS['TL_CONFIG']['installPassword'] = **deleted**;
$GLOBALS['TL_CONFIG']['encryptionKey'] = 'b4f10634a200c9ed3dd79681245bcfc6';
$GLOBALS['TL_CONFIG']['dbDriver'] = 'MySQL';
$GLOBALS['TL_CONFIG']['dbHost'] = **deleted**;
$GLOBALS['TL_CONFIG']['dbUser'] = **deleted**;
$GLOBALS['TL_CONFIG']['dbPass'] = **deleted**;
$GLOBALS['TL_CONFIG']['dbDatabase'] = **deleted**;
$GLOBALS['TL_CONFIG']['dbPconnect'] = false;
$GLOBALS['TL_CONFIG']['dbCharset'] = 'UTF8';
$GLOBALS['TL_CONFIG']['dbPort'] = 3306;
$GLOBALS['TL_CONFIG']['installCount'] = 0;
$GLOBALS['TL_CONFIG']['adminEmail'] = **deleted**;
$GLOBALS['TL_CONFIG']['cron_monthly'] = 201211;
$GLOBALS['TL_CONFIG']['latestVersion'] = '2.11.6';
$GLOBALS['TL_CONFIG']['websiteTitle'] = 'Image Fixe';
$GLOBALS['TL_CONFIG']['rewriteURL'] = false;
$GLOBALS['TL_CONFIG']['inactiveModules'] = 'a:2:{i:0;s:9:"cfs_forum";i:1;s:14:"cfs_jquery_gui";}';
$GLOBALS['TL_CONFIG']['defaultUser'] = 1;
$GLOBALS['TL_CONFIG']['dateFormat'] = 'd-m-Y';
$GLOBALS['TL_CONFIG']['datimFormat'] = 'd-m-Y H:i';
$GLOBALS['TL_CONFIG']['uploadPath'] = 'tl_files';
$GLOBALS['TL_CONFIG']['checkFileTree'] = false;
### INSTALL SCRIPT STOP ###

---

It seems to me that the upgrade has not completely succeeded, but I have no idea how to solve that problem.
I tried to restore the previous version, and done the upgrade a second time, but the result is the same.
Any help on the matter would be very appreciated.

The issue seems to be related to the login procedure, that would change the password in the database!

In PhpMyAdmin, I can see that the content of the password field is modified when I login, so its value is not the right one the next time I try to login; if I change the password "normally" via the backend, I do get the message that the password has been changed, but I cannot login the next time.

I tried to create another admin, but he gets the same "illness": his password is never recognized unless I force it via PhpMyAdmin to a special recover value... and it is lost again the first time I login.

Doesn't this thing ring a bell for someone? Encryption issue, caching, sesssion... whatever?

In this page I read:

Quote:

---

Improved password security thanks to a better hash algorithm

---

and this:

Quote:

---

Changed
Contao now uses crypt() to generate stronger password hashes (see #3225).

---

in that one.

And this thread that seems to speak about possible incompatibilities, especially when upgrading, moving site, or depending on PHP version.

Could this be related?

I eventually solved the issue by following the procedure I've explained in that post.

I run into the same problem after upgrading to version V3, but was able to reset the password through phpmyadmin following the procedure from the FAQ page: https://contao.org/en/faq/i-have-lost-m ... sword.html

Worked like a dream, password was immediately reset.

was it sha1 before v3 then?

Yes, a salted SHA1 hash.