Hi,
I checking the database I noticed that the table mail_users the mail_pass field is type PLAIN, why this is not type md5, sorry for my english
TK
-
-
Hello ;
Was a long story but after some discussion with c0urier, we will fix that
Thanks you for using i-MSCP.
-
-
Hello, thanks for reply, How to fixes this,
TK
Hello ;Was a long story but after some discussion with c0urier, we will fix that
Thanks you for using i-MSCP.
-
Was a long story but after some discussion with c0urier, we will fix thatThats really great!!
-
-
Hello, thanks for reply, How to fix thisThere is no Fix atm. wait for commit to Master
-
There is no Fix atm. wait for commit to Master
So can you tell us when?
Because that is veeery unsecure. -
-
So can you tell us when?
Because that is veeery unsecure.Not really. When someone can read this pw, he have allready hijacked your Server
-
I know that, but hashes are better than plain text.
-
-
I have another question about migration from ispcp - how it's possible if mail password in ispcp db is crypted and in i-mscp not?
How it's work? I-mscp is prepared for hashes or not (in stable version)? -
mail user passwords are stored twice, hashed and plain.
IIRC, the plain passwords were added because there was no better way to hand over passwords to webmail, correct me if am wrong.
same was with ftp passwords. -
