admin can view users password in profile

[Royce]

I had this mod on yabb gold and would love to have it for se.  Anybody?

[Ben_S]

No, they are encrypted to stop nosy webmasters doing that

[klumy]

This is right, the admin shouldn't see the password of the user.

[pege]

This is right, the admin shouldn't see the password of the user.

I agree that passwords should be private.  However, one could go to php, copy the encrypted password, then go into a member's profile and change their password to access their account, then go back to php to reinstall their original encrypted password.

[edlomon]

if i may add.on the SP version u can see the passwords and i and my memebrs liked it cause if they forgot their password,they could ask me and i would tell them.but i would never break into their account(i wouldnt have a reason to)but no one wants to click on forgot password and get a random password(no fun)but i think if a webmaster is going to be a peeker like that they they arent a real webmaster they are a webhacker.so i second this idea.

[TheJkWhoSaysNi]

yes.. which is why you can change their passwords for them.

I  think its wrong to be able to see the users password, i for one use the same password for most things (email, messenger accounts, other forum accounts) so if someone found out one, they could access most of my stuff! I dont like that idea at all. and if that was so, i'd want that the admin can see your password in the registration agreement.

[edlomon]

well ill amit im the same as well but not every1 is like that nor do they plan to. so for those people i think we should give them what they want.but like i said in the last post they DONT want a new password.if no one will make this,i will.

[TheJkWhoSaysNi]

no.. you cant make this.. Well not without removing the encryption from the passwords.

[edlomon]

well i have a encryptor.

[Wistman]

I can't see any point in this, if a member has forgotten his password how does he know if the one you give him is the original or a replacement?

Also if I wanted to write a post in a members name all I have to do is do it in phpMyadmin, but to what point?

Read their IMs ?  I can do that in phpMyadmin as well

Why would any admin want to access a members account?

[John R]

You seem to miss the point here.  With PHP the encryption is a one-way thing and is not reverseable.

cheers..........

[pege]

...if i may add.on the SP version u can see the passwords and i and my memebrs liked it cause if they forgot their password,they could ask me and i would tell them...

There is a "forgot e-mail" link they can click and have it mailed to them, right on the login screen, right?

[edlomon]

there is but no one want to have a random password and have to reactivate their account sounds wastefgul to them when they can email me and say hey whats my pass
=

[David]

They could e-mail you and tell you to set their password to soemthing for them.

[DeadSeraphim]

I'd also like to see this, or the encryption changed so that it IS reversable by the code, and doesn't display, whatever.

It's not about knowing what the passwords are, being able to tell users that or anything of the sort.  It's about being able to integrate other packages in to YaBB easily (web mail comes to mind because I've been working on it, as does gallery software, portal software, etc).  Right now you'd have to go in and mod every other package you've got to match your yabb.  It's a ROYAL pain, especially when you're new to PHP and are unfamiliar with whatever the new program is you're trying to integrate.