Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: password revealed  (Read 3954 times)

0 Members and 1 Guest are viewing this topic.

EagleX

  • Coppermine newbie
  • Offline Offline
  • Posts: 2
password revealed
« on: March 20, 2005, 12:29:35 am »

Helo,

I have install pnCPG 1.3 on Postnuke 750 and I have activated "Create Postnuke user in pnCPG" and "Update Coppermine users from Postnuke".

Then pnCPG create a table "cpg11d_users" with the users of Postnuke but revealing the passwords of the users !!!!!!!!!!!!

pnCPG reveals the passwords of the users of postnuke !!!!!!!!!!

what can i do ?
Logged

casNuy

  • Moderator
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 671
  • My other hobby
    • Nuy Community
Re: password revealed
« Reply #1 on: March 20, 2005, 06:09:39 pm »

No it does not reveal the passwords of Postnuke. The password for Coppermine is stored unencrypted (what's new ?) in the default coppermine user tabel.
I would expect that you have secured your SQL database so no unauthorised persons should be able to access it.

What is your problem ?>

Cas
Logged
Pages: [1]   Go Up
 

Page created in 0.014 seconds with 15 queries.