Thanks for fixing it! Bernhard
Hi, I think I found an error in ISPConfig 2.2.0. In statistics I read something like that: Speicherplatz gesamt: 4096 MB verbraucht:...
Above I wrote md5(). I actually meant to use the md5 version of crypt. I also verified that your md5 encryption works but in general random data...
Hi, as promised here is my patch for more secure passwords. It now uses a correct md5 encryption and a better salt (more secure) for the...
Hi, I found the following code in lib/classes/ispconfig_isp_web.lib.php (around line 314): if(substr($web["optionen_mysql_passwort"],0,5) !=...
The problem is that nearly every browser tries to load a favicon.ico file. This is displayed on the left side of the address line in the browser....
$passwort = "||||:". crypt(stripslashes($user["user_passwort"]), "$1$".md5(time()) ); } This is NOT more secure than a true md5 with a correct...
Not at the moment - sorry. I am happy to help out with patches (even agains a [public readable] SVN repository using svn diff) but I have no time...
After looking into the whole source code I think I am able to provide a security patch for these issues. This patch will include your patch (above...
And the other problem can be fixed int the same way but you have to be a bit more careful because you have to check if your system supports md5...
This is normal and correct. You can't set that option unless you allow it on your apache configuration. You have to change AllowOverride on the...
I think this is somehow related to that problem: http://www.howtoforge.com/forums/showthread.php?t=3000 Bernhard
Separate names with a comma.
