[Vtigercrm-developers] Encrypt portal users passwords?

[IT-Solutions4You]

A bit later but still
http://www.its4you.sk/en/vtiger-extensions/free/reset-customer-portal-password

Matus


Dňa 14. 3. 2017 o 8:46 socialboostdk napísal(a):
> Hi Matus,
> 
> Would it be possible to see the reset CP password code you're referring 
> to? It would be a great help for me :-)
> 
> Thanks!
> 
> On 23 February 2017 at 09:10, IT-Solutions4You 
> <info at its4you.sk 
> <mailto:info at its4you.sk>> wrote:
> 
>     We release it as extensions because we have add action link to
>     Contact module "Reset CP password" and this change is not ? possible
>     to track in code.vtiger.com <http://code.vtiger.com>. We have add
>     some Merge request which can be merged imeditaelly, like this one:
>     http://code.vtiger.com/vtiger/vtigercrm/merge_requests/160
>     <http://code.vtiger.com/vtiger/vtigercrm/merge_requests/160> but
>     nothing is
> 
>     Other point is I really don't know what are "system tables". I
>     suppose vtiger_tab and vtiger_fields are also system tables and each
>     extension can modify it.
> 
> 
>     Matus.
> 
>     Dňa 22. 2. 2017 o 16:57 Sutharsan Jeganathan napísal(a):
> 
>         Hi Matus
> 
>         Why did you release it as an extension. Even doesn't matter
>         whether it
>         is free, but I think it could be a bug fix into code.vtiger.com
>         <http://code.vtiger.com>
>         <http://code.vtiger.com>. Correct?
> 
>         If it is an extension and if possible to modify system tables,
>         it could
>         be  a security threat when admin password is compromised. But I
>         cannot
>         see any restrictions of installing a module in module manager,
>         which can
>         modify system tables. In this case you said is correct.
> 
> 
>         Thanks
>         Sutharsan Jeganathan
> 
>         On Wed, Feb 22, 2017 at 9:01 PM, IT-Solutions4You
>         <info at its4you.sk
>         <mailto:info at its4you.sk>
>         <mailto:info at its4you.sk
>         <mailto:info at its4you.sk>>> wrote:
> 
>              Reset password functionality was added to vtiger
>         Marketplace (we was
>              thinking about FREE extension), but was not published from
>         this reason:
> 
>              This module directly manipulates system table having
>         confidential
>              information - not acceptable.
> 
>              Matus
> 
>              Dňa 22. 2. 2017 o 15:32 socialboostdk napísal(a):
> 
>                  Excellent - thank you very much!
> 
>                  Ok, the reset functionality i can then just fix and
>         send as a
>                  suggestion
>                  for the VT-team.
> 
>                  Do you know if its possible to pull that part isolated
>         (the target
>                  implementation is vt 6.3) and implement, or does it
>         involve a bigger
>                  part of the platform?
> 
>                  Best,
>                  Chris
> 
>                  On 21 February 2017 at 18:45, Alan Lord
>                  <alanslists at gmail.com
>         <mailto:alanslists at gmail.com>
>                 
>         <mailto:alanslists at gmail.com
>         <mailto:alanslists at gmail.com>>
>                 
>         <mailto:alanslists at gmail.com
>         <mailto:alanslists at gmail.com>
>                 
>         <mailto:alanslists at gmail.com
>         <mailto:alanslists at gmail.com>>>> wrote:
> 
>                      On 21/02/17 17:23, socialboostdk wrote:
> 
>                          Hi there,
> 
>                          Currently contacts / portal-users password are
>         stored as
>                          plain-text. I
>                          have a request to change those into some
>         encrypted form.
> 
> 
>                      This was changed in vtiger 6.5.0.
> 
>                      But the reset password functionality is broken.
> 
>                      Al
> 
>                      _______________________________________________
>         http://www.vtiger.com/
> 
> 
> 
> 
>                  _______________________________________________
>         http://www.vtiger.com/
> 
> 
> 
>              _______________________________________________
>         http://www.vtiger.com/
> 
> 
> 
> 
>         _______________________________________________
>         http://www.vtiger.com/
> 
> 
> 
>     _______________________________________________
>     http://www.vtiger.com/
> 
> 
> 
> 
> _______________________________________________
> http://www.vtiger.com/
>