Get clear password in custom edit handler

Author Message

Guillaume Kulakowski

Sunday 26 July 2009 10:13:08 am

Hi,

I would like sync the eZ Publish password with an another script.
The problem is that the two scipts have a different crypto method...

I would like get the password not crypted in a "custom edit handler" for set my other application with it.

The problème is that I haven't clear pasword in the eZContentObjectEditHandler methods...

An idea ?

My blog : http://www.llaumgui.com (not in eZ Publish ;-))
eZC on RHEL : http://blog.famillecollet.com/pages/Config-en
eZC on Fedora : just "yum install php-channel-ezc"

André R.

Sunday 26 July 2009 12:39:43 pm

post params maybe?

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

Steven E. Bailey

Sunday 26 July 2009 1:33:11 pm

The only way(s) I can think of that you can do this is brute force it - which depending on the number of users and their level of sophistication may not be worth it (I have found that using dictionaries and some minor processing on a non-sophisticated user base that about 40% are crackable without breaking a sweat). The only other way is to capture the password when a user logs in and do whatever processing needs to be done at that point in time which is what I guess André was alluding to.

Certified eZPublish developer
http://ez.no/certification/verify/396111

Available for ezpublish troubleshooting, hosting and custom extension development: http://www.leidentech.com

André R.

Sunday 26 July 2009 2:06:18 pm

> at that point in time which is what I guess André was alluding to.

Yes, but as he mentioned edit handler I suggested looping the $_POST variable and find the password value when the user edits his profile. Just make sure you don't do anything when it is the default star values :)

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

Guillaume Kulakowski

Monday 27 July 2009 12:14:53 am

Thx André. In fact, I have do that, but I was find a better way... But if noo better way exist, my function works

My blog : http://www.llaumgui.com (not in eZ Publish ;-))
eZC on RHEL : http://blog.famillecollet.com/pages/Config-en
eZC on Fedora : just "yum install php-channel-ezc"

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.