View Single Post
  #1  
Old 09-15-2011, 10:59 AM
Inf3rnal's Avatar
Inf3rnal Inf3rnal is offline
Member
 
Join Date: Mar 2011
Location: Florida
Posts: 108
Gender: Male
Credits: 19,722
Inf3rnal is on a distinguished road
Default [Fixed] Admin Password as plaintext

When installing the script. You make the admin account before you add the salt.
This ends up making the admin password plaintext and there for useless to login.

Example:
Install new site fill out admin information as:

Username: 1
Password: 1

In the database your password ends up as:
1 (In plain text.)

When you login using "1" it fails due to not being hashed & salted.
Basically the admin account your create in the install is useless.

EDIT:
I figured it out. There is a link on the last page of the install a few lines above the "View Your Website" link.
It's says "Encrypt My Password".

Sorry for the confusion.

Last edited by Inf3rnal; 09-16-2011 at 07:27 AM. Reason: Durp.