[Vtigercrm-developers] Encrypt portal users passwords?

[socialboostdk]

Super! Thanks :) :)

On 22 June 2017 at 13:26, IT-Solutions4You <info at its4you.sk> wrote:

> A bit later but still
> http://www.its4you.sk/en/vtiger-extensions/free/reset-custom
> er-portal-password
>
> Matus
>
>
> Dňa 14. 3. 2017 o 8:46 socialboostdk napísal(a):
>
>> Hi Matus,
>>
>> Would it be possible to see the reset CP password code you're referring
>> to? It would be a great help for me :-)
>>
>> Thanks!
>>
>> On 23 February 2017 at 09:10, IT-Solutions4You <info at its4you.sk <mailto:
>> info at its4you.sk>> wrote:
>>
>>     We release it as extensions because we have add action link to
>>     Contact module "Reset CP password" and this change is not ? possible
>>     to track in code.vtiger.com <http://code.vtiger.com>. We have add
>>
>>     some Merge request which can be merged imeditaelly, like this one:
>>     http://code.vtiger.com/vtiger/vtigercrm/merge_requests/160
>>     <http://code.vtiger.com/vtiger/vtigercrm/merge_requests/160> but
>>     nothing is
>>
>>     Other point is I really don't know what are "system tables". I
>>     suppose vtiger_tab and vtiger_fields are also system tables and each
>>     extension can modify it.
>>
>>
>>     Matus.
>>
>>     Dňa 22. 2. 2017 o 16:57 Sutharsan Jeganathan napísal(a):
>>
>>         Hi Matus
>>
>>         Why did you release it as an extension. Even doesn't matter
>>         whether it
>>         is free, but I think it could be a bug fix into code.vtiger.com
>>         <http://code.vtiger.com>
>>         <http://code.vtiger.com>. Correct?
>>
>>         If it is an extension and if possible to modify system tables,
>>         it could
>>         be  a security threat when admin password is compromised. But I
>>         cannot
>>         see any restrictions of installing a module in module manager,
>>         which can
>>         modify system tables. In this case you said is correct.
>>
>>
>>         Thanks
>>         Sutharsan Jeganathan
>>
>>         On Wed, Feb 22, 2017 at 9:01 PM, IT-Solutions4You
>>         <info at its4you.sk
>>         <mailto:info at its4you.sk>
>>         <mailto:info at its4you.sk
>>
>>         <mailto:info at its4you.sk>>> wrote:
>>
>>              Reset password functionality was added to vtiger
>>         Marketplace (we was
>>              thinking about FREE extension), but was not published from
>>         this reason:
>>
>>              This module directly manipulates system table having
>>         confidential
>>              information - not acceptable.
>>
>>              Matus
>>
>>              Dňa 22. 2. 2017 o 15:32 socialboostdk napísal(a):
>>
>>                  Excellent - thank you very much!
>>
>>                  Ok, the reset functionality i can then just fix and
>>         send as a
>>                  suggestion
>>                  for the VT-team.
>>
>>                  Do you know if its possible to pull that part isolated
>>         (the target
>>                  implementation is vt 6.3) and implement, or does it
>>         involve a bigger
>>                  part of the platform?
>>
>>                  Best,
>>                  Chris
>>
>>                  On 21 February 2017 at 18:45, Alan Lord
>>                  <alanslists at gmail.com
>>         <mailto:alanslists at gmail.com>
>>                         <mailto:alanslists at gmail.com
>>         <mailto:alanslists at gmail.com>>
>>                         <mailto:alanslists at gmail.com
>>         <mailto:alanslists at gmail.com>
>>                         <mailto:alanslists at gmail.com
>>         <mailto:alanslists at gmail.com>>>> wrote:
>>
>>                      On 21/02/17 17:23, socialboostdk wrote:
>>
>>                          Hi there,
>>
>>                          Currently contacts / portal-users password are
>>         stored as
>>                          plain-text. I
>>                          have a request to change those into some
>>         encrypted form.
>>
>>
>>                      This was changed in vtiger 6.5.0.
>>
>>                      But the reset password functionality is broken.
>>
>>                      Al
>>
>>                      _______________________________________________
>>         http://www.vtiger.com/
>>
>>
>>
>>
>>                  _______________________________________________
>>         http://www.vtiger.com/
>>
>>
>>
>>              _______________________________________________
>>         http://www.vtiger.com/
>>
>>
>>
>>
>>         _______________________________________________
>>         http://www.vtiger.com/
>>
>>
>>
>>     _______________________________________________
>>     http://www.vtiger.com/
>>
>>
>>
>>
>> _______________________________________________
>> http://www.vtiger.com/
>>
>>
>
> _______________________________________________
> http://www.vtiger.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20170622/fbf3b6bb/attachment.html>