You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
if ($currentUser->authenticate($_POST['username'],$_POST['password']))
Desktop app (Qt) uses this for authentication. It would be better if checklogin.php would use hashed password for validation (hashed and then received by checklogin.php with POST) instead of plain text. This way the real password would never be stored as plain text on client side (Desktop app settings.xml).
The text was updated successfully, but these errors were encountered:
I'll welcome pull request regarding that improvement :)
Users also can choose do not store password also.
Or they can use just electron version of the app.
livehelperchat/lhc_web/modules/lhxml/checklogin.php
Line 11 in 080e86e
Desktop app (Qt) uses this for authentication. It would be better if checklogin.php would use hashed password for validation (hashed and then received by checklogin.php with POST) instead of plain text. This way the real password would never be stored as plain text on client side (Desktop app settings.xml).
The text was updated successfully, but these errors were encountered: