[Vtigercrm-developers] Encrypt portal users passwords?

[socialboostdk]

Hi Matus,

Would it be possible to see the reset CP password code you're referring to?
It would be a great help for me :-)

Thanks!

On 23 February 2017 at 09:10, IT-Solutions4You <info at its4you.sk> wrote:

> We release it as extensions because we have add action link to Contact
> module "Reset CP password" and this change is not ? possible to track in
> code.vtiger.com. We have add some Merge request which can be merged
> imeditaelly, like this one: http://code.vtiger.com/vtiger/
> vtigercrm/merge_requests/160 but nothing is
>
> Other point is I really don't know what are "system tables". I suppose
> vtiger_tab and vtiger_fields are also system tables and each extension can
> modify it.
>
>
> Matus.
>
> Dňa 22. 2. 2017 o 16:57 Sutharsan Jeganathan napísal(a):
>
>> Hi Matus
>>
>> Why did you release it as an extension. Even doesn't matter whether it
>> is free, but I think it could be a bug fix into code.vtiger.com
>> <http://code.vtiger.com>. Correct?
>>
>> If it is an extension and if possible to modify system tables, it could
>> be  a security threat when admin password is compromised. But I cannot
>> see any restrictions of installing a module in module manager, which can
>> modify system tables. In this case you said is correct.
>>
>>
>> Thanks
>> Sutharsan Jeganathan
>>
>> On Wed, Feb 22, 2017 at 9:01 PM, IT-Solutions4You
>> <info at its4you.sk
>> <mailto:info at its4you.sk>> wrote:
>>
>>     Reset password functionality was added to vtiger Marketplace (we was
>>     thinking about FREE extension), but was not published from this
>> reason:
>>
>>     This module directly manipulates system table having confidential
>>     information - not acceptable.
>>
>>     Matus
>>
>>     Dňa 22. 2. 2017 o 15:32 socialboostdk napísal(a):
>>
>>         Excellent - thank you very much!
>>
>>         Ok, the reset functionality i can then just fix and send as a
>>         suggestion
>>         for the VT-team.
>>
>>         Do you know if its possible to pull that part isolated (the target
>>         implementation is vt 6.3) and implement, or does it involve a
>> bigger
>>         part of the platform?
>>
>>         Best,
>>         Chris
>>
>>         On 21 February 2017 at 18:45, Alan Lord
>>         <alanslists at gmail.com
>>         <mailto:alanslists at gmail.com>
>>         <mailto:alanslists at gmail.com
>>         <mailto:alanslists at gmail.com>>> wrote:
>>
>>             On 21/02/17 17:23, socialboostdk wrote:
>>
>>                 Hi there,
>>
>>                 Currently contacts / portal-users password are stored as
>>                 plain-text. I
>>                 have a request to change those into some encrypted form.
>>
>>
>>             This was changed in vtiger 6.5.0.
>>
>>             But the reset password functionality is broken.
>>
>>             Al
>>
>>             _______________________________________________
>>             http://www.vtiger.com/
>>
>>
>>
>>
>>         _______________________________________________
>>         http://www.vtiger.com/
>>
>>
>>
>>     _______________________________________________
>>     http://www.vtiger.com/
>>
>>
>>
>>
>> _______________________________________________
>> http://www.vtiger.com/
>>
>>
>
> _______________________________________________
> http://www.vtiger.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20170314/893a24fa/attachment.html>