On Sun, 2003-02-23 at 02:59, Jeremy Lowery wrote: > I was wondering what you folks thought about encrypting the admin password > for webware? Personally I just hate a 'su' password sitting in a plain text > file in the config file the way it is.
Certainly that would be good. It would be best to hash the password (with sha1 or md5) rather than encrypt it. It could still be in the normal config file, but we'd have to provide some way to set it through the admin interface, since it would not be obvious to developers how to generate the hash. -- Ian Bicking [EMAIL PROTECTED] http://colorstudy.com 4869 N. Talman Ave., Chicago, IL 60625 / 773-275-7241 "There is no flag large enough to cover the shame of killing innocent people" -- Howard Zinn ------------------------------------------------------- This SF.net email is sponsored by: SlickEdit Inc. Develop an edge. The most comprehensive and flexible code editor you can use. Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial. www.slickedit.com/sourceforge _______________________________________________ Webware-discuss mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/webware-discuss
