Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: password handling: has it changed?  (Read 3869 times)

0 Members and 1 Guest are viewing this topic.

sleepmonsta

  • Coppermine newbie
  • Offline Offline
  • Posts: 3
password handling: has it changed?
« on: March 21, 2006, 05:47:04 pm »

I have been using 135 with a membership script called amember which integrates with coppermine via a plugin.

I have just upgraded to 144 and have noticed that passwords are now encrypted in the sql table whereas in 135 they were plain text.

This has rendered the amember script unusable as it passes login information to the cpg sql tables. Is there any way to change the password handling in cpg or should I just stick with an older version?

What is the most recent coppermine version that doesnt use encrypted passwords in the database?

thanks in advance for any help/suggestions
Logged

Tranz

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: 00
  • Offline Offline
  • Gender: Female
  • Posts: 6149
Re: password handling: has it changed?
« Reply #1 on: March 21, 2006, 05:59:03 pm »

If you had done an upgrade, the passwords would have remained plaintext until you changed the Config to encrypt passwords.
Logged

sleepmonsta

  • Coppermine newbie
  • Offline Offline
  • Posts: 3
Re: password handling: has it changed?
« Reply #2 on: March 21, 2006, 09:02:47 pm »

can you tell me how to change it back to plaintext? thanks
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: password handling: has it changed?
« Reply #3 on: March 21, 2006, 10:55:21 pm »

you can change this by modifiying coppermine's config table, however your user's passwords won't revert back to being unencrypted - this is a one-way road.
Logged

sleepmonsta

  • Coppermine newbie
  • Offline Offline
  • Posts: 3
Re: password handling: has it changed?
« Reply #4 on: March 22, 2006, 10:00:41 am »

thanks for the info. could you tell me step by step how to change it back to plaintext? I appreciate your help with this. Dave
Logged

Nibbler

  • Guest
Re: password handling: has it changed?
« Reply #5 on: March 22, 2006, 07:37:23 pm »

You can't. Either modify the 3rd party script or restore your gallery to the state it was in using a backup.
Logged
Pages: [1]   Go Up
 

Page created in 0.016 seconds with 15 queries.