1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

Email password not encrypted.

Discussion in 'Plesk 10.x for Linux Issues, Fixes, How-To' started by Resamarr, Dec 10, 2010.

  1. Resamarr

    Resamarr Guest

    0
     
    Hello,
    I just found out that the email password are not encrypted and can be accessible using the following command:

    mysql -uadmin -p`cat /etc/psa/.psa.shadow` psa

    use psa;

    SELECT CONCAT_WS('@',mail.mail_name,domains.name),accounts.password
    FROM domains,mail,accounts WHERE domains.id=mail.dom_id AND accounts.id=mail.account_id ORDER BY domains.name ASC,mail.mail_name ASC;

    How can I encrypt them because it's a breach in security in order to ensure my customers.

    Thank you in advance.
     
  2. IgorG

    IgorG Forums Analyst Staff Member

    49
    24%
    Joined:
    Oct 27, 2009
    Messages:
    24,572
    Likes Received:
    1,243
    Location:
    Novosibirsk, Russia
    Check output of '/usr/local/psa/bin/mail --help' command about -passwd_type
     
Loading...