Welcome, Guest. Please Login or Register.
April 28, 2025, 11:11:17 AM
Home Help Search Log in Register
News: SMF is the next generation in forum software, almost completely re-written from the ground up, make sure you don't fall for cheap imitations that suffer from feature bloat!

YaBB SE Community  |  General Category  |  Feedback  |  Security Hole ??? « previous next »
Pages: 1 [2] Reply Ignore Print
Author Topic: Security Hole ???  (Read 1159 times)
David
Destroyer Dave
Global Moderator
YaBB God
*****
Posts: 5761


I'm not a llama!

WWW
Re:Security Hole ???
« Reply #15 on: September 19, 2002, 04:49:41 AM »
Reply with quote

Quote from: Arab_ME on September 19, 2002, 04:29:18 AMand can any one tell me why the password to YaBBSE's database is not encrypted in the Settings.php!!!
The PHP encryption is one way.  There is now decrypt function.
Logged

Gobalopper
Mod Team
YaBB God
*****
Posts: 993


Cookie Monster

WWW
Re:Security Hole ???
« Reply #16 on: September 19, 2002, 05:59:46 AM »
Reply with quote

I suppose someone could make a mod that used ID_MEMBER instead of memberName. It is unique and not really a security risk showing it. This would be a big mod though and the IM system would have to be overhauled and probably some other areas that I'm missing.
Logged
A.M.A.
YaBB God
*****
Posts: 685


.:: :-) ::.

evolve_xp@hotmail.com WWW
Re:Security Hole ???
« Reply #17 on: September 19, 2002, 12:07:09 PM »
Reply with quote

Quote from: David on September 19, 2002, 04:49:41 AMThe PHP encryption is one way.  There is now decrypt function.
[off topic] so you will use it in y2 [/off topic]
Logged

Chris Cromer
The Strange One
Mod Team
YaBB God
*****
Posts: 3152


I am just a figment of your imagination.

WWW
Re:Security Hole ???
« Reply #18 on: September 19, 2002, 12:22:02 PM »
Reply with quote

Of course they will, it safe guards the passwords... it is great that there is no decryption function. :)
Logged

Chris Cromer

I am not suffering from insanity, I am enjoying every minute of it.
Micalus
Noobie
*
Posts: 4


huhu absolutistisch korreckt !

Re:Security Hole ???
« Reply #19 on: September 19, 2002, 12:35:06 PM »
Reply with quote

About the "everyone can see all topics in the statistics"-problem:

I wrote a mod that changes the SQL-Querrys and therefopr checks the permissions. So nobody sees topic-names that he should not see...

[*uhm* no attachments alloud ?]

Well I will see if I can post it anywherer else !
Logged
rblissett
Noobie
*
Posts: 44


I'm NOT a llama!

ICQ - 41376699
Re:Security Hole ???
« Reply #20 on: September 29, 2002, 11:02:42 AM »
Reply with quote

Could you post that change.... I know this has become an issue with the site I'm looking after.

thx
Logged
Pages: 1 [2] Reply Ignore Print 
YaBB SE Community  |  General Category  |  Feedback  |  Security Hole ??? « previous - next »
 


Powered by MySQL Powered by PHP YaBB SE Community | Powered by YaBB SE
© 2001-2003, YaBB SE Dev Team. All Rights Reserved.
SMF 2.1.4 © 2023, Simple Machines
Valid XHTML 1.0! Valid CSS

Page created in 0.029 seconds with 16 queries.