Let me begin by saying I know this is generally advised against but I'm in a tough spot at work where this is essentially being demanded and to my understanding it's theoretically possible.
I am tasked with transferring all user data from one WordPress site to another, and one of the stipulations is nobody would have to set a new password.
I know there's no chance of dehashing the passwords but I read somewhere yesterday that if you use the same salts in
wp-config.php then the passwords should work. I tried this and it didn't do the trick, but that may be due to some weird WPEngine caching or hidden setting, as does happen with them from time to time. What was especially weird is my old password still worked after I did this.
I also read that, in addition to the salts in
wp-config.php, there are salts stored in the database somewhere that compliment or mirror the ones stored in
wp-config.php. That part I don't quite understand and is probably the real question here. Where in the WordPress database are these salts stored?
Is there any hope of achieving this?