LDAP asp.net to php conversion help

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

User avatar
kaisellgren
DevNet Resident
Posts: 1675
Joined: Sat Jan 07, 2006 5:52 am
Location: Lahti, Finland.

Re: LDAP asp.net to php conversion help

Post by kaisellgren »

omniuni wrote:Plain text? At an educational instution? This does not sound very well set up at all! I would be extremely annoyed if my University was using a setup like that. (We have a pretty cool cross-platform authentication system that was developed several years ago.)
NameCheap.com stores passwords in plain-text. :|
dajohnson1s
Forum Newbie
Posts: 19
Joined: Sat Nov 15, 2008 12:44 pm

Re: LDAP asp.net to php conversion help

Post by dajohnson1s »

Well, I had actually emailed IT about and they basically told me to maintain my own user/password list....or get my own ssl certificate. As I was looking into the certificates, I found that student's webmail is also sent/stored in plain text. So I told my boss, to print the email IT sent, and when the committee asks why we put our users "at risk", I will forward the email, and mention the webmail. :D
Post Reply