UBB.threads PHP Forum Software Community Forums UBB.threads 7 Version 7 Support How to Show User Password In Control Panel

Hello,

I had to modify the old UBB 6.7.3 to allow this feature btu I cannot figure out how to enable it here in this version of the software. How do I make the user's password shoudl up under theri user profile when looking at them as an Administrator in the Control Panel?

OK - if this not doable, how do I re-inforce tough passwords then? Or does it do this already?

Travis

Since passwords are encoded in the database, theres no way to "manually" check out the password.

You'd have to say, use a javascript (like what several sites use) for checking the password's length (which IMO does nothing on actually checking that the password is "secure").

I think that Rick mentioned something with this on the 7.4 UI overhaul, but that was some time ago that it was talked about.

So then a child could changes their password to 1111 and get it hacked lickety split? Not very secure if you ask me.

Travis

Lol, do you honestly have a site that would see many children visiting on their parents accounts? I've never even heard of this happening before...

NO - it is 100% children all between 8 and 16. Anyone under 17 is not allowed to set thier own password. In the past when thsi has happened they have opened themselves up to trouble so now there parents request that we set their passwords and we keep them on file.

Travis

You can always become the user and change the passcode through the administer control panel.

This is only effective if I can at least limit what they can set their passwords to - but it appears any 4 characters will do it. That is extremely UNSAFE. This was a great feature in UBB.Classic - why dump it???

Travis

It's not a matter of DUMP it. It's a matter of version 7 was a complete re-write and many features of the older classic are being reintroduced as time permits, along with many other NEW features.

Just hang in there and in time most items that were of value in Classic should return.

Security was the key thing... Keeping passwords in plain text had major security issues. So encoding the password makes the "plain text" password's security a non-issue as they're no longer plain text...