unencrypted password

Post here for help with installing or upgrading mojoPortal pre-compiled release packages. When posting in this forum, please provide all relevant details. You may also want to review the installation or upgrading documentation.

If you have questions about using the source code or working with mojoPortal in Visual Studio, please post in the Developer forum.

Post here for help with installation of mojoPortal pre-compiled release packages

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

  • What operating system were you running when the bug appeared?
  • What database platform is your site using?
  • What version of mojoPortal are you running?
  • What version of .NET do you use?
  • What steps are necessary to reproduce the issue? Compare expected results vs actual results.

You may also want to review the installation or upgrading documentation.

If you have questions about using the source code or working with mojoPortal in Visual Studio, please post in the Developer forum.

This thread is closed to new posts. You must sign in to post in the forums.
3/25/2009 11:48:06 AM
Gravatar
Total Posts 251

unencrypted password

i just installed mojoportal-sqlite 2.2.9.6.

I took a look at the user database, and i see that all the password are in plain form, unencrypted.

I was quite sure to have seen in the web.config of mojoportal-mssql 2.2.9.5 a selection between to plain, encrypted and hashed password

now i cannot find anymore. My sleepy eyes are hiding it from my vision or is normal that mojoportal-sqlite cannot hash/encrypt the passwords?

3/25/2009 11:51:19 AM
Gravatar
Total Posts 18439

Re: unencrypted password

The Web.config setting is only used when the initial site is created. Since the Sqlite version ships with a db that already has the site created it does not apply. You can change the password format from Site Settings page but I recommend backup the db first as I have not tested that in SQLite at least in a long time.

Hope it helps,

Joe

3/25/2009 2:11:31 PM
Gravatar
Total Posts 251

Re: unencrypted password

the option in site configuration>security is grayed out saying "clear text in db"

is not possible to change it

3/25/2009 2:14:38 PM
Gravatar
Total Posts 18439

Re: unencrypted password

Make sure you have this in Web.config or user.config:

<add key="AllowPasswordFormatChange" value="true" />

If its a multi site intallation, you may have to go to site settings in the root admin site, choose the child site from the dropdown and then change it. 

Hope it helps,

Joe

You must sign in to post in the forums. This thread is closed to new posts.