2. PHPRunner General questions
  3. [SOLVED]  Members Template - Security Issue
This topic is locked
[SOLVED]

 Members Template - Security Issue

 		3/19/2011 2:18:03 PM
PHPRunner General questions
M
 mlapl1 author

Hello
I am doing some work with the Members Template (phprunner5.2 version).
I notice the following. If password encryption is turned ON then, after registration, when I get the successful registration message and click on the "Pay Now"link, it just takes me back to the login page and allows me to login with no problems. Of course, this is NOT the expected behaviour.
However, if encryption is turned OFF then it forces me to go to Paypal and pay my membership fee. This IS the expected behaviour.
Obviously, it would be good to be able to encrypt passwords as under the present circumstances passwords are stored in legible format.
Any hints on what to do???
Thanks

Andrew
M
 		mlapl1 author 3/19/2011

Hi Everyone.
I will try and refrain from asking too soon. Apparently, I asked the question many months ago and had the answer given to me by Jane Eldatseva, one of the great folks at PHPrunner. The answer is to wrap the password variable with the md5 function in the following events: "After Successful Login", Paypal(), After Successful registration.
I hope this helps someone else.
Andrew