Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Search Forums

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Showing results 1 to 13 of 13
Search took 0.00 seconds.
Search: Posts Made By: bjmg
Forum: General 15th March 2006, 18:33
Replies: 2
Views: 3,758
Posted By bjmg
Thanks for fixing it! Bernhard

Thanks for fixing it!

Bernhard
Forum: General 14th March 2006, 11:56
Replies: 1
Views: 2,338
Posted By bjmg
Error in Statistics (only large webs)

Hi,

I think I found an error in ISPConfig 2.2.0.
In statistics I read something like that:

Speicherplatz gesamt: 4096 MB
verbraucht: 1.20k

/web 657M
/user 565M
Forum: Installation/Configuration 10th March 2006, 08:21
Replies: 12
Views: 6,224
Posted By bjmg
Above I wrote md5(). I actually meant to use the...

Above I wrote md5(). I actually meant to use the md5 version of crypt. I also verified that your md5 encryption works but in general random data is better for encryptions than time data. It seems...
Forum: General 10th March 2006, 02:06
Replies: 3
Views: 3,437
Posted By bjmg
Thumbs up [2.2.0] My patch for more secure passwords

Hi,

as promised here is my patch for more secure passwords.
It now uses a correct md5 encryption and a better salt (more secure) for the standard encryption (DES).
Also .htpasswd files are...
Forum: General 9th March 2006, 23:33
Replies: 1
Views: 3,098
Posted By bjmg
[2.2.0] Possible bug in ispconfig_isp_web.inc.php

Hi,

I found the following code in lib/classes/ispconfig_isp_web.lib.php (around line 314):

if(substr($web["optionen_mysql_passwort"],0,5) != "||||:" and $web["optionen_mysql_passwort"] != "") {...
Forum: General 9th March 2006, 23:08
Replies: 4
Views: 4,906
Posted By bjmg
The problem is that nearly every browser tries to...

The problem is that nearly every browser tries to load a favicon.ico file. This is displayed on the left side of the address line in the browser. For this forum the favicon.ico is a yellow bulb/lamp....
Forum: Installation/Configuration 9th March 2006, 19:40
Replies: 12
Views: 6,224
Posted By bjmg
$passwort = "||||:"....

$passwort = "||||:". crypt(stripslashes($user["user_passwort"]), "$1$".md5(time()) );
}
This is NOT more secure than a true md5 with a correct salt.
By the way: a crypt salt only consists of two...
Forum: Installation/Configuration 9th March 2006, 19:33
Replies: 12
Views: 6,224
Posted By bjmg
Not at the moment - sorry. I am happy to help...

Not at the moment - sorry.
I am happy to help out with patches (even agains a [public readable] SVN repository using svn diff) but I have no time to develop new features or something like that....
Forum: Installation/Configuration 9th March 2006, 18:41
Replies: 12
Views: 6,224
Posted By bjmg
After looking into the whole source code I think...

After looking into the whole source code I think I am able to provide a security patch for these issues. This patch will include your patch (above - but I will go a step further) and a patch for...
Forum: Installation/Configuration 9th March 2006, 18:31
Replies: 12
Views: 6,224
Posted By bjmg
And the other problem can be fixed int the same...

And the other problem can be fixed int the same way but you have to be a bit more careful because you have to check if your system supports md5 crypted password or not. I would really love it if your...
Forum: Installation/Configuration 9th March 2006, 16:30
Replies: 6
Views: 110,833
Posted By bjmg
This is normal and correct. You can't set that...

This is normal and correct.
You can't set that option unless you allow it on your apache configuration. You have to change AllowOverride on the right place to "AllowOverride All". Anyway, you should...
Forum: Installation/Configuration 9th March 2006, 15:44
Replies: 12
Views: 6,224
Posted By bjmg
I think this is somehow related to that problem:...

I think this is somehow related to that problem: http://www.howtoforge.com/forums/showthread.php?t=3000

Bernhard
Forum: General 9th March 2006, 11:16
Replies: 2
Views: 3,758
Posted By bjmg
Exclamation Possible security problem

Hello,

my name is Bernhard Grn and I use ISPConfig since some time ago (without any problems). During a security audit (with Version 2.2.0) I saw a problem in my /etc/shadow file:
...
Showing results 1 to 13 of 13

 
Forum Jump

All times are GMT +2. The time now is 20:30.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.