search

bozimmerman / CoffeeMud

Full featured, mature MUD supporting MSP, MXP, OLC, with a web server, mail server, and MORE!
Apache License 2.0
191 stars 100 forks source link

Nice-to-have: Improved workflow for setting up new server #45

Open seamer1977 opened 4 years ago

seamer1977 commented 4 years ago

If you run through the initial setup script InstallUnix.sh, you're not asked for the most holy of information.

I assumed passwords are hashed by default. However; poking at the fakedb containing player data shows this is not so. Converting the password fields from text to hashed still leaves plaintext in place after conversion. In my mind, this is more important than requiring a name for the server. A randomly generated server ID of Coffeemud_bluecircleflyinghorse44 could be used as a placeholder until the owner gets their rhythm going.

There's a small chance the plaintext is left in place even after converting from player-file logins to account-menu logins. I've forgotten much of the terminology, so if its not clear just say so and I'll try harder.

bozimmerman commented 4 years ago

I sincerely appreciate that you feel this so extremely vitally important, yet still had the presence to realize it is a feature request, and not a bug. It can feel like a very subtle distinction sometimes, but noticing such things is still rare, and so, worth praising imho. And, of course, the way the legacy plain-test passwords are retained is quite intentional. Change your password to imprint the new hash. I'll see what I can do to make it better.