pillone / usntssearch

NZB Metasearch engine
pillone.github.io/usntssearch
263 stars 79 forks source link

Security: passwords are saved unencrypted #14

Open CptChaos opened 11 years ago

CptChaos commented 11 years ago

I've just started using this tool, I really like it so far! One thing I found was the passwords (for the webinterface itself) are saved unencrypted in custom_params.ini. Someone with read permissions on the file can easily see the passwords now.

pillone commented 11 years ago

thanks for using this.

you make a very good point.

I implement it in the next release.

pillone commented 11 years ago

Scheduled for the next one. I have to find a way of not breaking the install of many others. This will require a bit of engineering and 0.41 is mostly for bug fix.