[dev] Re: [cvs] commit: passwd/config .cvsignore backends.php.dist conf.xml passwd/lib Driver.php Passwd.php base.php passwd/lib/Driver ldap.php sql.php passwd/templates/main main.inc passwd main.php

Mike Cochrane mike@graftonhall.co.nz
Sun Oct 13 02:10:27 PDT 2002


> ----- Message from eric.rostetter@physics.utexas.edu ---------
> 
> Quoting Mike Cochrane <mike@graftonhall.co.nz>:
> 
> > Maybe designed wasnt' the best word... able to be a guest application...
> 
> Okay...
> 
> > Passwd, now, doesn't deal with the logged in user at all. This turns passwd
> > into a more generic password change module.
> 
> And, as a side effect, a module much easier to exploit by hackers to hack
> passwords...
> 

I'm not sure what you mean by this one... You still need to know the current
password so this is the same as any other login.

- Mike :-)


More information about the dev mailing list