[pmwiki-users] PmWIki AuthUser passwords stored in clear in PHP session files

This question was already posted in August, but did not receive any answer. Same player shoots again ;-) PHP stores session data to temporary files on the server. These files contain in clear all the session variables and their values. When using AuthUser, PmWIki stores the user password in

Re: [pmwiki-users] PmWIki AuthUser passwords stored in clear in PHP session files

Christophe David wrote: This question was already posted in August, but did not receive any answer. Same player shoots again ;-) PHP stores session data to temporary files on the server. These files contain in clear all the session variables and their values. When using AuthUser, PmWIki

Re: [pmwiki-users] PmWIki AuthUser passwords stored in clear in PHP session files

Maybe I just don't understand the problem, but if you use a secure authentication method other than the built-in PmWiki passwords, I can't see how PHP or PmWiki can know the password. I use PmWiki AuthUser, but with the passwords stored on a LDAP server instead of on the page