search

scriptPilot / app-framework

Applications for any device with HTML, CSS and JavaScript - free and open source!
MIT License
653 stars 143 forks source link

v3 - add defaultPassword to config #893

Closed tiptronic closed 5 years ago

tiptronic commented 5 years ago

add defaultPassword parameter to config.js

scriptPilot commented 5 years ago

@tiptronic - I think storing passwords in plain text is a very unsecure architecture. So, if you have all other data as defaults ... only the password is to enter ... i think thats acceptable :-)

tiptronic commented 5 years ago

@scriptPilot Adding the ability doesn't mean, the user is FORCED to save his/her password. If a user doesn't want to store it's password, he can leave the field just empty. Removing the defaultPassword-option removes the ability to deploy automatically (or patch the files after every update, with is even worse).

And since the option is given in the ftp-deploy package, it seems to be some common behavior.

btw - in every Wordpress installation, the password is stored in the config file.