On 21 Nov 2005, at 14:44, James Bennett wrote:

On 11/21/05, Adrian Holovaty <[EMAIL PROTECTED]> wrote:
No, the admin interface for users currently doesn't encrypt passwords.
There's a longstanding ticket for this. Ideally there'd be a "Create
password" link that would create it on the server side via
XMLHttpRequest and populate the field.

Is there a reason why the admin couldn't simply use a _pre_save method
to hash an incoming plaintext password?

I don't know about the ticket, but this seems like a better solution. I was already thinking this having seen the posts in the last few days.


________________________________
Afternoon, man about the Internet -- http://aftnn.org/


Reply via email to