ProductCart E-Commerce Solutions Homepage
Forum Home Forum Home > ProductCart > Customizing ProductCart
  New Posts New Posts RSS Feed - Security Problem
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Security Problem

 Post Reply Post Reply
Author
Message
utopiac View Drop Down
Newbie
Newbie


Joined: 03-February-2015
Location: United Kingdom
Status: Offline
Points: 5
Post Options Post Options   Thanks (0) Thanks(0)   Quote utopiac Quote  Post ReplyReply Direct Link To This Post Topic: Security Problem
    Posted: 16-March-2015 at 4:57pm
Hi everyone,

It has just came to my attention that when a user requests a password reminder form Product Cart the password is sent to the customer via email unhashed. 

Does anyone know of a way to change this?

Thanks in advance,

Craig
Back to Top
ProductCart View Drop Down
Admin Group
Admin Group

ProductCart Team

Joined: 01-October-2003
Status: Offline
Points: 135
Post Options Post Options   Thanks (0) Thanks(0)   Quote ProductCart Quote  Post ReplyReply Direct Link To This Post Posted: 17-March-2015 at 2:57pm
Hi Craig,

The Reset/Forgot Password methodology is being rewritten in ProductCart v5.2 (ETA Q3) to use a "one-way" approach that will send a message to the account-holder's e-mail address which contains a link and instructions for changing or resetting their password.

The ProductCart Team

Home of ProductCart shopping cart software
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.04
Copyright ©2001-2021 Web Wiz Ltd.

This page was generated in 0.063 seconds.