Clear text passwords in phpMyAdmin

[CSsab]

I noticed after adding a database to Ispconfig 3 in the control panel that the password for the new web database pops up in clear text view in phpMyAdmin - surely this is not a good thing? Have I done something wrong in my install to make this happen or is this the way it is supposed to be?

Not sure if this is related, but the password field on my english dbispconfig for sys_user is entitled "passwort" and not "password" - the sys_user passwords do NOT appear in clear text which is better I think?

Thanks in advance.

[till]

Not sure if this is related, but the password field on my english dbispconfig for sys_user is entitled "passwort" and not "password" - the sys_user passwords do NOT appear in clear text which is better I think?

Thats not related.

I noticed after adding a database to Ispconfig 3 in the control panel that the password for the new web database pops up in clear text view in phpMyAdmin - surely this is not a good thing? Have I done something wrong in my install to make this happen or is this the way it is supposed to be?

ISPConfig uses the mysql grant statement to create the new database user on the target mysql server. The problem is that the grant syntax expects the password to be cleartext.

[CSsab]

Hi till,
Thanks for your answer. Thanks for your patience since I am still trying to figure out how everything works.

1. Can you tell me please which part of the install scripts I would need to change to have the 'passwort' table changed to 'password'.

2. When I add a new database in the CP and click save, what script is called and does it contain the IDENTIFIED BY clause?

Cheers

[till]

1. Can you tell me please which part of the install scripts I would need to change to have the 'passwort' table changed to 'password'.

You would have to change a lot of different files in the installer and interface plus that your version will become incompatible with future ISPConfig releases. Changing this does not really makes sense as it will cause you alot of problems without any benefits.

2. When I add a new database in the CP and click save, what script is called and does it contain the IDENTIFIED BY clause?

Client databases are created by the client database plugin. The file is named mysql_clientdb_plugin.inc.php