Web Wiz - Green Windows Web Hosting - Celebrating 25 Years!

  New Posts New Posts RSS Feed - error on EncryptedPasswords
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

error on EncryptedPasswords

 Post Reply Post Reply Page  <12
Author
121261 View Drop Down
Newbie
Newbie


Joined: 14 November 2005
Location: Denmark
Status: Offline
Points: 5
Post Options Post Options   Thanks (0) Thanks(0)   Quote 121261 Quote  Post ReplyReply Direct Link To This Post Posted: 14 November 2005 at 1:22pm

ok it works from the user side, but not admin side

 
 
 
Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 14 November 2005 at 1:25pm
There is a known problem that you can not disable the password encryption when entering new users from within the admin section.

Really you should keep password encryption enabled for security.
Back to Top
JJLatWebWiz View Drop Down
Groupie
Groupie
Avatar

Joined: 02 March 2005
Location: United States
Status: Offline
Points: 136
Post Options Post Options   Thanks (0) Thanks(0)   Quote JJLatWebWiz Quote  Post ReplyReply Direct Link To This Post Posted: 14 November 2005 at 8:38pm
Did you also set the blnEncryptedPasswords to False in the admin/common.asp?

One reason you might want to reconsider your decision to not use encryption is the total lack of concern for security by most users. If given the chance, users will use their most commonly used password for the forum. If they have the ability to set their own network password, they will use the same password for the forum. If their network password is exposed as plain text in a SQL or worse an Access table, the security of your network is easily compromised. If your forum can be touched by the public internet, you might as well just publish a list of network usernames and passwords. Assuming your forum has a magical firewall that blocks hackers from getting to your forum, the plaintext passwords are still accessible to the forum users.

There's just so little pain involved in using the encryption and so much pain involvded with a compromised database that not using encryption is such a serious consideration, that all security experts would try talk you out of it.

-boRg- this makes me think that maybe you should put some code in that will let end-users know that passwords are or are not encrypted. I feel pretty safe using one of my fairly typical passwords on a Web Wiz forum, but I guess I never even considered that there would be admins actually preferring plain text passwords. Now I wonder how many admins have made the change.
p.s. I'm not affiliated with Web Wiz Guide in any way. I'm just an average Web Wiz user repaying my debt for the use of their fine forum by trying to help other Web Wiz Guide users.
Back to Top
 Post Reply Post Reply Page  <12

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.