ZenphotoCMS Forum
password displayed on login screen! - Printable Version

+- ZenphotoCMS Forum (https://forum.zenphoto.org)
+-- Forum: Support (https://forum.zenphoto.org/forum-1.html)
+--- Forum: General support (https://forum.zenphoto.org/forum-4.html)
+--- Thread: password displayed on login screen! (/thread-10532.html)



password displayed on login screen! - d4gurasu - 2012-10-24

This can't possibly be an unoticed bug. I've done something dumb surely.. like hit the "give everyone the password" option.

in 1.4.3.3, default theme, if I set a gallery password (with or without a user name) and if I do NOT enable the "User name" security option, then on my main front end login screen the password is displayed right under the login prompt, before anything is typed.

I have to wonder if something is leaking through that I see and others don't based on some php setting. I did turn off all the error reporting options.
If I knew how to post a screen shot I would, because it's pretty funny.

I probably will use user passwords anyway.




password displayed on login screen! - acrylian - 2012-10-24

You mean the password was shown in clear text? It would only if the checkboxbelow is checked. That is just to help regarding typos. I could not reproduce this.




password displayed on login screen! - d4gurasu - 2012-10-24

No I mean before you type anything the password is displayed.

The password is displayed below the buttons, below the inner line box but above the "I forgot my password" link.

It's just in text floating left justified in the blue field, not in the password box.

Anyone can see it, read it, type it, and get in. It's strange.




password displayed on login screen! - acrylian - 2012-10-24

I did not get that using the Zenpage theme. Best you open a ticket and attach and anonymized screenshot.




password displayed on login screen! - sbillard - 2012-10-24

I do not see how this is possible. Zenphoto does not even have the password stored anywhere in clear text. Perhaps you put the password into the Hint field?

Also check your browser. Some browsers will automatically provide the password on logon forms.




password displayed on login screen! - d4gurasu - 2012-10-25

See I knew I did something dumb (and that's why I did not file it as a bug report, I also assumed the password couldn't exist in clear text).

I must have gotten carried away when typing the password confirmation. Yes I put in in the hint! I had not even noticed that field.

Thanks. No way to mark threads as [SOLVED] here I guess.