source/Application/Model/User.php
protected function _getLoginQueryHashedWithMD5($userName, $password, $shopId, $isAdmin)
    {
        $database = \OxidEsales\Eshop\Core\DatabaseProvider::getDb();

        $userNameCondition = $this->formQueryPartForUserName($userName, $database);
        $passwordCondition = $this->formQueryPartForMD5Password($password, $database);
        $shopOrRightsCondition = $this->formQueryPartForAdminView($shopId, $isAdmin);
        $userActiveCondition = $this->formQueryPartForActiveUser();

        $query = "SELECT `oxid`
                    FROM oxuser 
                    WHERE 1  
                    AND $userActiveCondition 
                    AND $passwordCondition 
                    AND $userNameCondition 
                    $shopOrRightsCondition
                    ";

        return $query;
    }
protected function _getLoginQueryHashedWithMD5($userName, $password, $shopId, $isAdmin)
    {
        $database = \OxidEsales\Eshop\Core\DatabaseProvider::getDb();

        $userNameCondition = $this->formQueryPartForUserName($userName, $database);
        $passwordCondition = $this->formQueryPartForMD5Password($password, $database);
        $shopOrRightsCondition = $this->formQueryPartForAdminView($shopId, $isAdmin);
        $userActiveCondition = $this->formQueryPartForActiveUser();

        $query = "SELECT `oxid`
                    FROM oxuser 
                    WHERE 1  
                    AND $userActiveCondition 
                    AND $passwordCondition 
                    AND $userNameCondition 
                    $shopOrRightsCondition
                    ";

        return $query;
    }
protected function _getLoginQueryHashedWithMD5 ( $ userName , $ password , $ shopId , $ isAdmin ) { $ database = \ OxidEsales \ Eshop \ Core \ DatabaseProvider :: getDb ( ) ; $ userNameCondition = $ this -> formQueryPartForUserName ( $ userName , $ database ) ; $ passwordCondition = $ this -> formQueryPartForMD5Password ( $ password , $ database ) ; $ shopOrRightsCondition = $ this -> formQueryPartForAdminView ( $ shopId , $ isAdmin ) ; $ userActiveCondition = $ this -> formQueryPartForActiveUser ( ) ; $ query = "SELECT `oxid`
                    FROM oxuser 
                    WHERE 1  
                    AND $userActiveCondition 
                    AND $passwordCondition 
                    AND $userNameCondition 
                    $shopOrRightsCondition
                    " ; return $ query ; }
Builds and returns user login query.

MD5 encoding is used in legacy eShop versions.
We still allow to perform the login for users registered in the previous eshop versions.

@param string $userName login name
@param string $password login password
@param string $shopId   shopid
@param bool   $isAdmin  admin/non admin mode

@deprecated since v6.4.0 (2019-03-15); This method will be removed completely.

@return string
Builds and returns user login query .