Encrypted Password

A place for security related announcements and discussions - please check this forum frequently!
Post Reply
twc
Posts: 233
Joined: Fri Jun 18, 2010 12:25 am
Location: Netherlands

Encrypted Password

Post by twc » Fri Jan 13, 2012 3:42 pm

why not Encrypted the password ?

config

cmb
Posts: 14225
Joined: Tue Jun 21, 2011 11:04 am
Location: Bingen, RLP, DE
Contact:

Re: Encrypted Password

Post by cmb » Fri Jan 13, 2012 4:00 pm

Hi twc,

IMO password encryption is not too useful, if the password is stored in a cookie even in encrypted form, as cookies are vulnerable to XSS.
twc wrote:why not Encrypted the password ?
Short answer: due to a lack of time.

Long answer: we had a long discussion about reimplementing the login securtiy of CMSimple_XH based on PHP sessions. But that would require a rewrite of the plugin loader, as currently no session must be started before the plugin loader is called, so we decided to release XH 1.5 first (there were a lot of changes already, so it took quite some time), and to postpone the implementation of a session based login to the next version.

Christoph
Christoph M. Becker – Plugins for CMSimple_XH

boishakhi

Re: Encrypted Password

Post by boishakhi » Tue Feb 07, 2012 11:21 am

[Spam removed]
Last edited by boishakhi on Fri Feb 10, 2012 7:41 am, edited 1 time in total.

cmb
Posts: 14225
Joined: Tue Jun 21, 2011 11:04 am
Location: Bingen, RLP, DE
Contact:

Re: Encrypted Password

Post by cmb » Tue Feb 07, 2012 12:08 pm

Hi boishakhi,

well, this is a support forum for the content management system CMSimple, and not a general computer or network support forum. Plenty of those are available, so you might try your luck there.

But as the question is quite easy to answer: ask the admin of the network for the password. If you don't know who's the admin, ask your teacher. She should remember who gave her the password or set up the wifi connection on her laptop.

Christoph
Christoph M. Becker – Plugins for CMSimple_XH

Post Reply