Re: Insecure login form redirections?

[Mikolaj Rydzewski]

Matt Raible wrote:

This is how Roller currently works - as a workaround for the fact that
you can't forward to the j_security_check servlet.  You can only
redirect and we use a LoginServlet.java to redirect to this URL in
case the user wants their password programmatically encrypted.  The
easiest way to solve this problem is to turn on encryption.

Thanks for quick response. Turning encryption on in roller.properties and global update on rolleruser table solved problem.

--
Mikolaj Rydzewski      <[EMAIL PROTECTED]>        http://ceti.pl/~miki/
                   PGP KeyID: 8b12ab02
There are three kinds of people: men, women and unix.

smime.p7s
Description: S/MIME Cryptographic Signature