Customizing ProductCart - Security Problem

Print Page | Close Window

Security Problem

Printed From: ProductCart E-Commerce Solutions
Category: ProductCart
Forum Name: Customizing ProductCart
Forum Description: Exchange messages with other users that are customizing ProductCart.
URL: https://forum.productcart.com/forum_posts.asp?TID=5989
Printed Date: 30-June-2024 at 3:56am
Software Version: Web Wiz Forums 12.04 - http://www.webwizforums.com

Topic: Security Problem

Posted By: utopiac
Subject: Security Problem
Date Posted: 16-March-2015 at 4:57pm

Hi everyone,

It has just came to my attention that when a user requests a password reminder form Product Cart the password is sent to the customer via email unhashed.

Does anyone know of a way to change this?

Thanks in advance,

Craig

Replies:

Posted By: ProductCart
Date Posted: 17-March-2015 at 2:57pm

Hi Craig,

The Reset/Forgot Password methodology is being rewritten in ProductCart v5.2 (ETA Q3) to use a "one-way" approach that will send a message to the account-holder's e-mail address which contains a link and instructions for changing or resetting their password.

-------------
The ProductCart Team

Home of ProductCart http://www.productcart.com" rel="nofollow - shopping cart software