28 replies to this topic

[Sweeney]

they are still vulnerable to sql injection...(not resolved)
changing your password = password no longer in plaintext ...so script kiddies can't get your password if its in plaintext(somewhat of a solution)

It's not a solution, though. It's a stopgap at best.

By the way, you've not answered LW's earlier question of how you come about this detailed information.

It is a temporary solution at best and doesn't warrant bumping this thread. It is misleading.

Shh, the adults are talking.

[Waser Lave]

they are still vulnerable to sql injection...(not resolved)
changing your password = password no longer in plaintext ...so script kiddies can't get your password if its in plaintext(somewhat of a solution)

: )

Why would they only hash your password when you change it rather than updating all of them at the same time with a single sql update query? As somebody with quite a bit of experience working with databases that makes no sense to me at all.

[FeelsGood]

By the way, you've not answered LW's earlier question of how you come about this detailed information.

sythe

[Sweeney]

sythe

A deeply reputable source, there.