Subj : src/sbbs3/useredit.cpp
To   : MRO
From : Digital Man
Date : Mon Feb 27 2023 01:51 pm

  Re: src/sbbs3/useredit.cpp
  By: MRO to Digital Man on Mon Feb 27 2023 03:12 pm

 >   Re: src/sbbs3/useredit.cpp
 >   By: Digital Man to MRO on Mon Feb 27 2023 11:00 am
 >
 >  >   Re: src/sbbs3/useredit.cpp
 >  >   By: MRO to echicken on Mon Feb 27 2023 10:59 am
 >
 >  >  > having passwords in multiple files in plain text seems insecure.
 >
 >  > Set SCFG->System->Security Options->Display/Log Passwords Locally to "No"
 >  > and then user passwords should then only ever be stored in *one* file
 >  > (data/user/user.tab).
 >
 >
 > yeah i didnt even think about the log recording.  i was thinking about
 > the system pw being in the main.cnf and then the user date file.

<nods>

 > do you mean user.dat instead of user.tab?

No, I meant user.tab: https://synchro.net/docs/newuserbase.txt
-- 
                                            digital man (rob)

Synchronet "Real Fact" #119:
Synchronet v2.00a for DOS was released on June 6, 1994 (6 months after v1c02)
Norco, CA WX: 48.2øF, 86.0% humidity, 1 mph E wind, 0.00 inches rain/24hrs

.