[dev] Re: [cvs] commit: passwd/config .cvsignore backends.php.dist
conf.xml passwd/lib Driver.php Passwd.php base.php
passwd/lib/Driver ldap.php sql.php passwd/templates/main main.inc
passwd main.php
Mike Cochrane
mike@graftonhall.co.nz
Sun Oct 13 02:10:27 PDT 2002
> ----- Message from eric.rostetter@physics.utexas.edu ---------
>
> Quoting Mike Cochrane <mike@graftonhall.co.nz>:
>
> > Maybe designed wasnt' the best word... able to be a guest application...
>
> Okay...
>
> > Passwd, now, doesn't deal with the logged in user at all. This turns passwd
> > into a more generic password change module.
>
> And, as a side effect, a module much easier to exploit by hackers to hack
> passwords...
>
I'm not sure what you mean by this one... You still need to know the current
password so this is the same as any other login.
- Mike :-)
More information about the dev
mailing list