Password Encryption

Go down

Password Encryption

Post by ThatBoogieman on Fri Mar 04, 2011 5:10 am

So, it has just come to my attention that all user passwords on my forum - possibly all Forumotion forums - are not encrypted. At least, they appear in plain text in your registration confirmation e-mail.

Could someone please tell me what, if any, encryption is protecting my users' passwords?

EDIT: Also, if there is no encryption, I'm likely deleting the forum, and would HIGHLY suggest adding at least a a +MD5 salt encryption on ALL passwords.

ThatBoogieman
New Member

Posts : 3
Reputation : 0
Language : English

http://the42nd.forumotion.com/

Back to top Go down

Re: Password Encryption

Post by Sanket on Fri Mar 04, 2011 6:12 am

Your question best likely should be PM'ed to Typlo. He can answer you in the best possible way.
avatar
Sanket
ForumGuru

Male Posts : 48766
Reputation : 2828
Language : English
Location : Mumbai

http://webartzforum.com

Back to top Go down

Re: Password Encryption

Post by ThatBoogieman on Fri Mar 04, 2011 6:23 am

Bleh. Tried, and apparently there's a posting limit on being able to send PMs. Could you direct his attention here for me, please?

Also, just ran a test on password recovery, and didn't get the same password back in plain text, so that's good. I'd still like to know what encryption is used to reassure my users, and also suggest that a user's password isn't sent in an e-mail plain-text upon registration, as that's still a slight security issue, especially for anyone I make an admin.

ThatBoogieman
New Member

Posts : 3
Reputation : 0
Language : English

http://the42nd.forumotion.com/

Back to top Go down

Re: Password Encryption

Post by !_NICK_! on Fri Mar 04, 2011 7:16 am

I don't think it will.
avatar
!_NICK_!
Active Poster

Male Posts : 1505
Reputation : 69
Language : English, HTML, and CSS
Location : In the middle of no return.

Back to top Go down

Re: Password Encryption

Post by Sanket on Fri Mar 04, 2011 11:27 am

You can send the PM now.
avatar
Sanket
ForumGuru

Male Posts : 48766
Reputation : 2828
Language : English
Location : Mumbai

http://webartzforum.com

Back to top Go down

Re: Password Encryption

Post by ThatBoogieman on Tue Mar 15, 2011 7:00 pm

He hasn't replied... :/

ThatBoogieman
New Member

Posts : 3
Reputation : 0
Language : English

http://the42nd.forumotion.com/

Back to top Go down

Re: Password Encryption

Post by Sanket on Wed Mar 16, 2011 3:39 am

If he doesn't reply to you withing 3-4 days after you sent the PM. PM him once more. He gets loads of PM's everyday.
avatar
Sanket
ForumGuru

Male Posts : 48766
Reputation : 2828
Language : English
Location : Mumbai

http://webartzforum.com

Back to top Go down

Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum