Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon6.gif   Security (passwords over web browser), posted by Aamir Khan on Tue Feb 25 22:18:57 2003 
    icon2.gif   Re: Security (passwords over web browser), posted by Stefan Ritt on Wed Feb 26 10:34:12 2003 
Message ID: 236     Entry time: Tue Feb 25 22:18:57 2003     Reply to this: 239
Icon: Cool  Author: Aamir Khan  Author Email: aamir@aamir.uk.com 
Category: Comment  OS:   ELOG Version:  
Subject: Security (passwords over web browser) 
Stefan - Just to say that this is an excellent piece of work well done.

I have just started an internal company Elog server, couple of 
clarifications :

1) is there a way around seeing the password in text when self regestering, 
if I turn this option off when the user changes his password will this 
password still be seen?

2) I have changed all the files to be owned on my RedHat Server by the 
user:group as elog:elog and set and moved the logbooks to another directory 
other than in /usr/local/elog namely /home/elog/logbooks, my concern is is 
I was to upgrade to a newer version would it be a simple install over the 
top? any caveats?

thanks again an absolute dream program.

kind regards Aamir
ELOG V3.1.5-3fb85fa6