Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: Username and Passowrd  (Read 2570 times)

0 Members and 1 Guest are viewing this topic.

mashad

  • Coppermine newbie
  • Offline Offline
  • Posts: 7
Username and Passowrd
« on: January 22, 2006, 09:05:26 pm »

Is it possible to get the user name and passwords sent to admin email address in plain text ? How ?


Thanks
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: Username and Passowrd
« Reply #1 on: January 22, 2006, 10:27:21 pm »

what for?
To be notifed about user registration, you can able the corresponding option in coppermine's config, see http://coppermine-gallery.net/demo/cpg14x/docs/index.htm#admin_registration_notify - but this will send you the username only. The password is being stored encrypted inside the database, so you'd have to modify the code that sends the email on registration to contain the password as well. Once it has been stored inside the database, you can't retrieve it any longer, the encryption is one-way.

Being an admin has to do with trust and reliability imo, so you shouldn't spy on your user's passwords, as they might be using their password for other logins as well that are none of your business. If they forgot their passwords, they can use the "Forgot password" link on the login page to have a new password emailed to them. So ethically, you shouldn't try to retrieve their passwords. If you must, do as suggested and modify the code on the registration page.
Logged
Pages: [1]   Go Up
 

Page created in 0.014 seconds with 21 queries.