Can you see the Passwords of the members in your CMS?

Discussion in 'Content Management' started by Maximo, Apr 18, 2008.

0
  1. #1
    Hi all,

    I'm a member of a few Drupal/Joomla CMS sites, and I just realized .. do they have access to my passwords? Or is it all encrypted?

    Thanks!
     
    Maximo, Apr 18, 2008 IP
  2. Nick252

    Nick252 Well-Known Member

    Messages:
    983
    Likes Received:
    19
    Best Answers:
    0
    Trophy Points:
    110
    #2
    no , they are encrypted
     
    Nick252, Apr 19, 2008 IP
  3. cybersquate

    cybersquate Banned

    Messages:
    413
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Administrator can do anything. MD5 ? I can decrypt it. :D
    Anyway, am i know why you have asked it ?
     
    cybersquate, Apr 19, 2008 IP
  4. easiernet

    easiernet Peon

    Messages:
    43
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    In Joomla superadmin can change user's pass, but can't see it. Of course there will always be the way how to do that when admin has access to sql.
     
    easiernet, Apr 21, 2008 IP
  5. kodut

    kodut Well-Known Member

    Messages:
    2,738
    Likes Received:
    76
    Best Answers:
    1
    Trophy Points:
    170
    #5
    if you are an administrator , then you can decrypt it easily
     
    kodut, Apr 21, 2008 IP
  6. mininoz

    mininoz Peon

    Messages:
    1
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #6
    Most of cms use md5 to encryp user's password
     
    mininoz, Apr 21, 2008 IP
  7. cybersquate

    cybersquate Banned

    Messages:
    413
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #7
    but like i have said before mate... there are some online tools for decrypt it...
    Common, you can use google to search this... lolz...
     
    cybersquate, Apr 21, 2008 IP
  8. TwistMyArm

    TwistMyArm Peon

    Messages:
    931
    Likes Received:
    44
    Best Answers:
    0
    Trophy Points:
    0
    #8
    If you use a decent salt there is no online tool for 'decrypting'.

    Besides, MD5 is not even encryption in the first place... sorry, but sometimes the misuse of terminology really annoys me :(
     
    TwistMyArm, Apr 21, 2008 IP