[Owncloud] Password is stored in Session
Simon Opitz
simon.opitz at isx-software.de
Thu Dec 22 11:05:25 UTC 2011
today I found out that the users password is being stored in the session
variables in clear text.
you might want to delete line 197 in user.php to get rid this security issue
;)
opitzfamilys
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/owncloud/attachments/20111222/1b090ed0/attachment.html>
More information about the Owncloud
mailing list