Clear text passwords in phpMyAdmin

Discussion in 'Installation/Configuration' started by CSsab, May 22, 2010.

  1. CSsab

    CSsab New Member

    I noticed after adding a database to Ispconfig 3 in the control panel that the password for the new web database pops up in clear text view in phpMyAdmin - surely this is not a good thing? Have I done something wrong in my install to make this happen or is this the way it is supposed to be?

    Not sure if this is related, but the password field on my english dbispconfig for sys_user is entitled "passwort" and not "password" - the sys_user passwords do NOT appear in clear text which is better I think?

    Thanks in advance.:)
     
  2. till

    till Super Moderator

    Thats not related.

    ISPConfig uses the mysql grant statement to create the new database user on the target mysql server. The problem is that the grant syntax expects the password to be cleartext.
     
  3. CSsab

    CSsab New Member

    MySQL tables created by ISPConfig installer

    Hi till,
    Thanks for your answer. Thanks for your patience since I am still trying to figure out how everything works.

    1. Can you tell me please which part of the install scripts I would need to change to have the 'passwort' table changed to 'password'.

    2. When I add a new database in the CP and click save, what script is called and does it contain the IDENTIFIED BY clause?

    Cheers
     
  4. till

    till Super Moderator

    You would have to change a lot of different files in the installer and interface plus that your version will become incompatible with future ISPConfig releases. Changing this does not really makes sense as it will cause you alot of problems without any benefits.

    Client databases are created by the client database plugin. The file is named mysql_clientdb_plugin.inc.php
     

Share This Page