migrate MySQL wp db into supabase

I have my product actually on MySQL WordPress db, and user pass are md5 encrypted.

Would like to do q seamless migration so users doesn't have to re-register.

Is there a way to solve this?

silentworks•11/25/22, 9:58 PM

Would it still be a WP site?

iStun4FunOP•12/4/22, 7:32 PM

Nope

iStun4FunOP•12/4/22, 7:32 PM

It will be nextjs

Ojay•1/20/23, 12:08 PM

Hi @iStun4Fun

I have this exact need, porting about 2,00 users (email/password) from WordPress to Supabase. Did you manage to figure this out? If so I'd love a little insight into your approach along with any helpful resources you found... thanks so much!

iStun4FunOP•1/23/23, 11:51 AM

Hey @Ojay not yet, but i assume that this task can be solved going to the root of the problem. For example decoding the hash that on wp is usually md5

WordPress uses the PHPass framework, which salts the passwords before performing eight passes of MD5-based hashing. Alongside this, there are other techniques that further protect the data. As a result, although it's based on MD5, an inherently weak algorithm, mounting a successful attack against WP's hashing system is not really practical at the time of writing.

WordPress uses the PHPass framework, which salts the passwords before performing eight passes of MD5-based hashing. Alongside this, there are other techniques that further protect the data. As a result, although it's based on MD5, an inherently weak algorithm, mounting a successful attack against WP's hashing system is not really practical at the time of writing.

Ojay•1/23/23, 11:56 AM

Thanks for getting back to me @iStun4Fun

after looking into it I think we might just have to force the user to update their password upon their first login attempt on the new site. As long as the UX is good then hopefully all will seem straightforward/seamless. Plenty to work out still... if I have any luck decrypting the passwords I'll let you know.

iStun4FunOP•1/23/23, 11:57 AM

Thanks! i'll be back if i depict this too.

Also your solution is pretty straightforward and worth to use as the inactive users wont be taking space on the db there.

iStun4FunOP•1/23/23, 12:04 PM

maybe this can be help to you too @Ojay

https://supertokens.com/docs/emailpassword/supabase-intergration/backend-signup-override

SuperTokens, Open Source Authentication

Add simple email and password sign up functionality to your site or app in 15 minutes

iStun4FunOP•1/23/23, 12:10 PM

Also WP uses md5 as supabase uses bcrypt, auth0 migration should be done seamlessly, if you watch to migrate from wp to auth0 should be a step to consider to look into docs / cases to solve the problem too.

https://kevcodez.medium.com/migrating-125-000-users-from-auth0-to-supabase-81c0568de307

Medium

Migrating 125.000 users from Auth0 to Supabase

Over the course of a few weeks, we gradually migrated 125k users with social auth and email+password logins from Auth0 to Supabase…

iStun4FunOP•1/23/23, 12:25 PM

and this auth0 allows to md5 hash import to bcrypt

https://auth0.com/docs/manage-users/user-migration/bulk-user-import-database-schema-and-examples

Auth0 Docs

Bulk User Import Database Schema and Examples

Learn how to perform bulk user imports with the Management API.

Ojay•1/23/23, 3:41 PM

Hmmm, the Auth0 approach looks interesting... I have an account with them so will run some tests as soon as I can. I did look into doing the same with Firebase but ended up scrapping it. Thanks for the follow up @iStun4Fun!

WordPress uses the PHPass framework, which salts the passwords before performing eight passes of MD5-based hashing. Alongside this, there are other techniques that further protect the data. As a result, although it's based on MD5, an inherently weak algorithm, mounting a successful attack against WP's hashing system is not really practical at the time of writing.

migrate MySQL wp db into supabase

Similar Threads

Similar Threads

Similar Threads