The 'crypt.php' downloaded a few seconds ago is identical to the one I 
downloaded three days ago.  If you have changed it, this is undetectable.
Changing the enableCrypt from the old (caveman) version to yours has not 
altered anything.
I am still getting plaintext when I expect cyphertext in the warning:

Current password th3G.EMsw.ZeI=bean109 is not correct. Try again!

This is coming from the line:

[command if_1 "! equal {~password} {=crypt_1} ? warn='Current password 
{~password}={=crypt_1} is not correct. Try again!'"]

so the value of {=crypt_1} is still the plaintext passed to:

[command crypt_1 {=passnow}]

in the line above. ( see your revised Password Changer).

I suspect that I am NOT getting the latest crypt.php from the boltwire site.
TOF.

On Friday, 20 June 2014 02:15:36 UTC+1, Dan wrote:
>
> A couple things I see right off.
>
> 1) Make sure the plugin is lowercase (crypt.php) in config.php. BoltWire 
> probably won't pick it up if it's upper case.
>
> 2) You have to enable the plugin for the page that uses it. ie, in site 
> config put
>
> enableCrypt: action.password  (not login* -- which means for all login 
> pages)
>
> Also, I rewrote the password changer solution page and uploaded a new 
> crypt plugin. You might want to get those just to make sure there's not 
> some other problem.
>
> Cheers,
> Dan
>
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"BoltWire" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/boltwire.
For more options, visit https://groups.google.com/d/optout.

Reply via email to