johannschopplich / kirby-locked-pages

🔐 Password-protect pages, Panel blueprint included
https://kirbyseo.com
MIT License
41 stars 2 forks source link

Cookie remains valid after password change #16

Open gbdesign2023 opened 5 months ago

gbdesign2023 commented 5 months ago

If I subsequently change the password in the panel, I remain logged in. This makes it impossible to lock out users or use a password that changes frequently.

The password is also saved in plain text, which poses a security risk. The plug-in should therefore not be used to protect sensitive content. This should be indicated in the description.

johannschopplich commented 5 months ago

For sure! Great ideas. I maintain this plugin, although I don't implement new features anymore, since my frontend development workflow has changed.

So PR for features is welcome!