to boonex team - bug

Hi,

There is a bug that allow user to login without knowing the real password, only with the hashed one.

For security purpose I don't write here any code. Please contact me and I'll give you all.

Thanks

Quote · 18 Feb 2010

Actually that bug could be useful for letting admins log into user accounts.  Something some of us need occasionally for fixing avatars, etc.  It is a real effort to do it with other methods.  Maybe the should leave that bug there :-)

Quote · 18 Feb 2010

Deanos Tools, free module in the market, allows you to do that.

Light man a fire keep him warm for a night, light him ON fire & he will be warm the rest of his life
Quote · 18 Feb 2010

 

Hi,

 

There is a bug that allow user to login without knowing the real password, only with the hashed one.

 

For security purpose I don't write here any code. Please contact me and I'll give you all.

 

Thanks

If you can send it here to take a look...

Quote · 18 Feb 2010

I am going to have to download Deanos tool - seems like he does lots of cool things with it.  I'm trying to be conservative with my mods until the first minor version release, but who knows when that will be.

Quote · 18 Feb 2010

 

I am going to have to download Deanos tool - seems like he does lots of cool things with it.  I'm trying to be conservative with my mods until the first minor version release, but who knows when that will be.

 

Boonex...Can we please get a guesstimate of a release date for 7.0.1....

Quote · 18 Feb 2010

Boonex...Can we please get a guesstimate of a release date for 7.0.1....

"When it's done"

<insert appropriate image of game here>

BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin
Quote · 18 Feb 2010

Actually that bug could be useful for letting admins log into user accounts.  Something some of us need occasionally for fixing avatars, etc.  It is a real effort to do it with other methods.  Maybe the should leave that bug there :-)

i know it can be usefull..but it can be usefull to hacker too! I tell this only in pm to boonex team..it can be public only when (and if) it Willemstad be' fixed (this fix require a lot of rewrite that i think boonex don't want to do).. And boonex please let us know when the first real release Will be out(7.0.1), actually the 7.0.0 bave too much problems and function not working and we can't use it for a real site!!!

Quote · 18 Feb 2010
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.