| Failed logins "password" in Action Log [message #27709] |
Thu, 22 September 2005 15:07  |
Ernesto
Messages: 413
Registered: August 2005
Karma: 0
|
Senior Member |
|
|
Is there anyway to turn off the feature where the forum logs the failed password the user entered? I find it rather "unsecure" to so easilly (For other admins) to access the users passwords.
Example:
I try to loginto this forum as "ernesto" with the password "google".
Sadly, my username is "Ernesto" and not "ernesto" so now the admin here can see my password.
So, my question: Can I turn this off in my own forum in any way?
Ginnunga Gaming
|
|
|
|
|
|
|
|
| Re: Failed logins "password" in Action Log [message #27712 is a reply to message #27711] |
Thu, 22 September 2005 15:43  |
Ilia
Messages: 13241
Registered: January 2002
Karma: 0
|
Senior Member
Administrator
Core Developer |
|
|
The data is ONLY visible to forum admins, people who already can change the user's password if they so choose to. And even though the forum stores passwords as md5 hashes and admin could always modify the code to log ALL login attempts. Ultimately, if you don't trust your administrator, who do you trust?
You need to edit the SQL schema if your want to change case sensetivity of the logins.
FUDforum Core Developer
[Updated on: Thu, 22 September 2005 15:44] Report message to a moderator |
|
|
|
|
|
Calendar
Search
Help
Members
Register
Login
Home
]