The issuse is not about encryption. The problem is that the password fields are *showing* blanks even though there's a password in the mail server and some users think that it is blank in the mail server and they go and keep typing new passwords and then reporting this issue to us and asking us why the password is blank and we have to explain that it is showing blank but there's actually a password.
I don't know if the html has the password. Does it?
Salama
From: "Suneel Jhangiani" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: <[EMAIL PROTECTED]> Subject: [Modus] blank password field in Webadmin Date: Mon, 17 Nov 2003 11:57:22 -0000
I might be mistaken here, but I believe that displaying '*' will still put the password in text within the HTML code. The only way to prevent this would be to ensure the server has an encryption / decryption routine and add an additional hidden field to the output keeping track of whether or not the password is encrypted or not.
Regards,
Suneel Jhangiani
Inter-Computer Technology Ltd.
Modus3 Bug Hunt Winner
At least Congress doesn't make death worse every year.
-----Original Message----- From: Salama hussein [mailto:[EMAIL PROTECTED] Sent: 17 November 2003 05:51 To: [EMAIL PROTECTED] Subject: [Modus] blank password field in Webadmin
* This is the modus mailing list *
When you enter a password in Webadmin and then save, the password fields go
blank.
This is confusing some users as they think they lost the password.
I think the Java admin applet did the same thing in Vopmail.
What's the logic behind this.. why doesn't the password show some asterisks?
Salama
_________________________________________________________________
Send a QuickGreet with MSN Messenger
http://www.msnmessenger-download.com/tracking/cdp_games
**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.
_________________________________________________________________
MSN Shopping upgraded for the holidays! Snappier product search... http://shopping.msn.com
** To unsubscribe, send an Email to: [EMAIL PROTECTED] with the word "UNSUBSCRIBE" in the body or subject line.
