Jump to content

Version 3.4 - Server Hash and recorded Password


darren.nolan

Recommended Posts

Howdy Everyone! (yay for first post).

 

I've just updated to the latest version. I'm impressed. I have a few enquires.

 

When WHMCS records the server hash, the hash is placed in my SQL database as plain text - it doesn't seem to be encrypted by any means (as oppose to using just a username and password, it encrypts it by a particular means). While this isn't life threatening, would be nice if it wasn't so "see-able" from using something like phpmyadmin (as anyone that gets into the SQL database could see the hash).

 

Secondly - I use firefox and it records my login details, username and password for logging into the admin panel of WHMCS. To my understand, as it does this and see <input type="name" name="username"> and <input type="password" name="password"> - it places my WHMCS username and password in there when using HASH. while I understand this also isn't a huge problem, just though some users might need to be aware that firefox does this to "help" (complicate) matters.

 

Has anyone else noticed these? Just thought I'd let someone know.

 

Cheers guys! Love the system.

Dazz

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated