#18897: add the password as 2nd argument to changepassword command
-------------------------------------+-------------------------------------
Reporter: maduma@… | Owner: nobody
Type: New feature | Status: closed
Component: Core (Management | Version: 1.4
commands) | Resolution: wontfix
Severity: Normal | Triage Stage:
Keywords: | Unreviewed
Has patch: 1 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by russellm):
* status: new => closed
* needs_docs: => 0
* resolution: => wontfix
* needs_tests: => 0
* needs_better_patch: => 0
Comment:
Thanks for the suggestion; however, I'm going to reject this as a feature
request.
Passwords should always be entered manually from a TTY input. Any
mechanism to work around this is a potential security risk. Consider:
* If something can be put on the command line, someone is going to try
and use the argument in a script.
* If you type the password at the command line, it will be preserved in
command history, which means anyone who can get access to your login can
find out your password, too.
--
Ticket URL: <https://code.djangoproject.com/ticket/18897#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit https://groups.google.com/groups/opt_out.
