Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon4.gif   password encryption, posted by Alex H on Fri May 20 14:40:12 2005 password.gif
    icon4.gif   Re: password encryption, posted by Stefan Ritt on Fri May 27 14:48:05 2005 
       icon12.gif   Re: password encryption, posted by Alex H on Mon May 30 10:01:14 2005 
    icon2.gif   Re: password encryption, posted by Gary Clayson on Mon May 30 19:18:34 2005 
       icon2.gif   Re: password encryption, posted by Emiliano Gabrielli on Mon May 30 19:56:01 2005 
          icon2.gif   Re: password encryption, posted by Stefan Ritt on Mon May 30 20:16:11 2005 
             icon14.gif   Re: password encryption, posted by Alex H on Tue May 31 09:07:37 2005 
    icon2.gif   Re: password encryption, posted by Stefan Ritt on Sat Jun 4 14:00:17 2005 
Message ID: 1176     Entry time: Sat Jun 4 14:00:17 2005     In reply to: 1154
Icon: Reply  Author: Stefan Ritt  Author Email: stefan.ritt@psi.ch 
Category: Request  OS:   ELOG Version: 2.5.8-6 
Subject: Re: password encryption 

Alex H wrote:
I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex


I switched the login page to the HTTP "POST" method, where arguments are not passed in the URL.

The new version is under CVS. Can you try if the behaviour is better now? I upgraded also the ELOG forum, so you can try there as well.
ELOG V3.1.5-fe60aaf