Details
-
Bug
-
Status: Open
-
Resolution: Unresolved
-
1.4b5-dev / CVS
-
None
-
None
-
Operating System: Other
Platform: Other
-
20565
Description
Either that or the customizer needs to be changed to lock down the query
parameter for admin access only. Otherwise it's a security hole - someone can
query TURBINE_USER table to see the passwords.
Or we encrypt passwords by default.