×

Notice

The forum is in read only mode.
Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1

TOPIC: security issue

security issue 11 years 1 month ago #19953

  • Pål Monstad
  • Pål Monstad's Avatar Topic Author
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 14
  • Thank you received: 0
Hi, there is an issue about security in Matukio. In the support tab the account link is dispalyed. The link contains the password!! This should be encrypted or hidden as other users with admin rights can see the password.

security issue 11 years 1 month ago #19959

  • Yves Hoppe
  • Yves Hoppe's Avatar
  • Offline
  • Administrator
  • Administrator
  • Posts: 3519
  • Karma: 71
  • Thank you received: 556
Hi,

not sure what you mean - do you mean the liveupdate user options? This will be changed sometime to an application id.

Best regards,

Yves

security issue 11 years 1 month ago #20093

  • Pål Monstad
  • Pål Monstad's Avatar Topic Author
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 14
  • Thank you received: 0
Yes, the URL looks like (I have replaced id/username/passwords with X/XX/XXX

compojoom.com/index.php?option=com_ars&v...name=XX&password=XXX

This should not be visable to users in back end.
  • Page:
  • 1
Time to create page: 0.122 seconds