[Chameleon-dev] [Bug 1055] New: [Chameleon - Samples] Authentication samples password issues

bugzilla-daemon at bugzilla.maptools.org bugzilla-daemon at bugzilla.maptools.org
Wed May 25 12:10:06 EDT 2005


http://bugzilla.maptools.org/show_bug.cgi?id=1055

           Summary: [Chameleon - Samples] Authentication samples password
                    issues
           Product: Chameleon
           Version: 2.2
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Samples
        AssignedTo: chameleon-dev at lists.maptools.org
        ReportedBy: jlacroix at dmsolutions.ca


The main problem here is that the password in the sqlite file is not encrypted.

>From Bart's comments:
Sample login page
http://localhost/chameleon/samples/sample_user.phtml

does not have **** password mask field.

Also, I don't see any difference after submit between a valid user/pwd 
combination and a wrong one. What is supposed to happen?

If I open the sqlite database file, I can just see the passwords!!  Shouldn't
those be encrypted?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.


Please do NOT reply to this email, use the link above instead to 
login to bugzilla and submit your comment. Any email reply to this
address will be lost.


More information about the Chameleon-dev mailing list