samwaf c8dc8853c4 fix(security): bcrypt password hashing + server-side forced password change ...

- Migrate MD5+global-salt hashing to bcrypt with transparent upgrade on login
- Enforce password change in Auth middleware (allow only changepwd/logout/ws)
- Generate random initial admin password on fresh install (data/initial_password.txt)

2026-07-03 14:47:59 +08:00

..

request

增加前后台互联，有缺陷后续改造

2022-10-06 00:04:12 +08:00

response

fix(security): bcrypt password hashing + server-side forced password change

2026-07-03 14:47:59 +08:00