[TYPO3-dev] MD5 for FE-User password?

Malte Jansen mail at maltejansen.de
Tue Nov 6 13:47:12 CET 2007


Hi,

I don't know if there was a discussion about this topic.

What about  storing the password with a md5-encryption?

Because a normal user normally uses a password which uses for other 
purposes (you should not do it, but he is cushy). The User does not know 
that the password is not encrypted in the database.

So if you have BE-User connected with FE. You normally do not use two 
different passwords for one homepage. So it does not matter wheater you 
have you encrypt the be-password.

A normal admin should not use the password. But with over 100.000 
systems running, you don't wheather somebody abuse it.


Regards,

Malte




More information about the TYPO3-dev mailing list