forum.coppermine-gallery.net

Support => Older/other versions => cpg1.2 Standalone Support => Topic started by: augustin on January 14, 2004, 08:51:27 pm

Title: User passwords
Post by: augustin on January 14, 2004, 08:51:27 pm

In the admin panel. I want to be able to see the user passwords in their profiles. How can this be done. I thought the passwords would show just like the other info

Title: User passwords
Post by: Joachim Müller on January 14, 2004, 10:45:10 pm

they don't show, and we will not make a mod out of it, as this would be a serious security gap. Use a tool like phpMyAdmin to check the db table cpg11d_users - you can see the passwords in plaintext there.
What on earth do you need your users passwords for. It's definitely a "no-no" to peek into user's privacy this way, because most users will choose a password on your site they use on other occasions as well - looking into it is not ok!
Slightly off-topic: currently there's a work in progress to encrypt the passwords in the db as well - will probably go into the next release...

GauGau

Title: Reason
Post by: augustin on January 15, 2004, 01:59:03 am

my concern is that should a suer create an a private album, I  as the site adminastrator should have full access to any album on my site, to ensure that content is not illegal ( I would only look if questions would be raised). My intent is not to invade but to monitot my site.

Title: User passwords
Post by: Casper on January 15, 2004, 10:30:05 am

augustin, admin can look at and edit/delete every album on the site, even users private albums.
In config, make sure that 'show private icon to unlogged users' is set to YES.  Then admin will see the private icon on the main page, but can see the pics and do the admin stuff from the categry page as normal categories. (note, in the next version this should not be necessary)

This is much easier than logging in as the person.  Also, as admin, when you look at the pics, you will see the persons IP address, so can ban them by that.