Username and Passowrd Username and Passowrd
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Username and Passowrd

Started by mashad, January 22, 2006, 09:05:26 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

mashad

Is it possible to get the user name and passwords sent to admin email address in plain text ? How ?


Thanks

Joachim Müller

what for?
To be notifed about user registration, you can able the corresponding option in coppermine's config, see http://coppermine-gallery.net/demo/cpg14x/docs/index.htm#admin_registration_notify - but this will send you the username only. The password is being stored encrypted inside the database, so you'd have to modify the code that sends the email on registration to contain the password as well. Once it has been stored inside the database, you can't retrieve it any longer, the encryption is one-way.

Being an admin has to do with trust and reliability imo, so you shouldn't spy on your user's passwords, as they might be using their password for other logins as well that are none of your business. If they forgot their passwords, they can use the "Forgot password" link on the login page to have a new password emailed to them. So ethically, you shouldn't try to retrieve their passwords. If you must, do as suggested and modify the code on the registration page.