maketank/Froxlor
2
0
Fork 0
Code Pull Requests Releases Activity

show link to clear plaintext email account passwords if enabled; set store-plaintext-passwords default to 'off'; fixes #557

Browse Source 
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
This commit is contained in:
Michael Kaufmann
2018-07-10 09:47:01 +02:00
parent 436d141bd1
commit 1690cadab9
5 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
actions/admin/settings/210.security.php
View File

@@ -35,7 +35,7 @@ return array(
'settinggroup' => 'system', 'settinggroup' => 'system',
'varname' => 'mailpwcleartext', 'varname' => 'mailpwcleartext',
'type' => 'bool', 'type' => 'bool',
'default' => true, 'default' => false,
'save_method' => 'storeSettingField', 'save_method' => 'storeSettingField',
), ),
'system_passwordcryptfunc' => array( 'system_passwordcryptfunc' => array(

2
install/froxlor.sql
View File

@@ -542,7 +542,7 @@ opcache.interned_strings_buffer'),
('system', 'defaultip', '1'), ('system', 'defaultip', '1'),
('system', 'phpappendopenbasedir', '/tmp/'), ('system', 'phpappendopenbasedir', '/tmp/'),
('system', 'deactivateddocroot', ''), ('system', 'deactivateddocroot', ''),
('system', 'mailpwcleartext', '1'), ('system', 'mailpwcleartext', '0'),
('system', 'last_tasks_run', '000000'), ('system', 'last_tasks_run', '000000'),
('system', 'nameservers', ''), ('system', 'nameservers', ''),
('system', 'mxservers', ''), ('system', 'mxservers', ''),

6
lib/navigation/00.froxlor.main.php
View File

@@ -272,6 +272,12 @@ return array(
'label' => $lng['admin']['autoupdate'], 'label' => $lng['admin']['autoupdate'],
'required_resources' => 'change_serversettings', 'required_resources' => 'change_serversettings',
'show_element' => extension_loaded('zip') 'show_element' => extension_loaded('zip')
),
array(
'url' => 'admin_settings.php?page=wipecleartextmailpws',
'label' => $lng['admin']['wipecleartextmailpwd'],
'required_resources' => 'change_serversettings',
'show_element' => (Settings::Get('system.mailpwcleartext') == true)
) )
) )
), ),

4
lng/english.lng.php
View File

@@ -516,8 +516,8 @@ $lng['changepassword']['also_change_webalizer'] = ' also change password for the
$lng['serversettings']['mailpwcleartext']['title'] = 'Also save passwords of mail accounts unencrypted in database'; $lng['serversettings']['mailpwcleartext']['title'] = 'Also save passwords of mail accounts unencrypted in database';
$lng['serversettings']['mailpwcleartext']['description'] = 'If this is set to yes, all passwords will also be saved unencrypted (clear text, plain readable for everyone with database access) in the mail_users-table. Only activate this if you intend to use SASL!'; $lng['serversettings']['mailpwcleartext']['description'] = 'If this is set to yes, all passwords will also be saved unencrypted (clear text, plain readable for everyone with database access) in the mail_users-table. Only activate this if you intend to use SASL!';
$lng['serversettings']['mailpwcleartext']['removelink'] = 'Click here to wipe all unencrypted passwords from the table.'; $lng['admin']['wipecleartextmailpwd'] = 'Clear plaintext passwords';
$lng['question']['admin_cleartextmailpws_reallywipe'] = 'Do you really want to wipe all unencrypted mail account passwords from the table mail_users? This cannot be reverted!'; $lng['question']['admin_cleartextmailpws_reallywipe'] = 'Do you really want to wipe all unencrypted mail account passwords from the table mail_users? This cannot be reverted! The setting to store email passwords unencrypted will also be set to OFF';
$lng['admin']['configfiles']['overview'] = 'Overview'; $lng['admin']['configfiles']['overview'] = 'Overview';
$lng['admin']['configfiles']['wizard'] = 'Wizard'; $lng['admin']['configfiles']['wizard'] = 'Wizard';
$lng['admin']['configfiles']['distribution'] = 'Distribution'; $lng['admin']['configfiles']['distribution'] = 'Distribution';

4
lng/german.lng.php
View File

@@ -511,8 +511,8 @@ $lng['changepassword']['also_change_webalizer'] = ' Auch Passwort der Statistiks
$lng['serversettings']['mailpwcleartext']['title'] = 'Passwörter der Mail-Konten auch im Klartext in der Datenbank speichern'; $lng['serversettings']['mailpwcleartext']['title'] = 'Passwörter der Mail-Konten auch im Klartext in der Datenbank speichern';
$lng['serversettings']['mailpwcleartext']['description'] = 'Wenn diese Einstellung auf Ja gesetzt wird, werden alle Passwörter auch unverschlüsselt (also im Klartext, für jeden mit Zugriff auf die Froxlor-Datenbank sofort lesbar) in der mail_users-Tabelle gespeichert. Aktivieren Sie diese Option nur dann, wenn Sie SASL nutzen!'; $lng['serversettings']['mailpwcleartext']['description'] = 'Wenn diese Einstellung auf Ja gesetzt wird, werden alle Passwörter auch unverschlüsselt (also im Klartext, für jeden mit Zugriff auf die Froxlor-Datenbank sofort lesbar) in der mail_users-Tabelle gespeichert. Aktivieren Sie diese Option nur dann, wenn Sie SASL nutzen!';
$lng['serversettings']['mailpwcleartext']['removelink'] = 'Klicken Sie hier, um alle unverschlüsselten Passwörter aus der Tabelle zu entfernen.'; $lng['admin']['wipecleartextmailpwd'] = 'Klartext-Passwörter leeren';
$lng['question']['admin_cleartextmailpws_reallywipe'] = 'Wollen Sie wirklich alle unverschlüsselten Passwörter aus der Tabelle mail_users entfernen? Dieser Schritt kann nicht rückgängig gemacht werden!'; $lng['question']['admin_cleartextmailpws_reallywipe'] = 'Wollen Sie wirklich alle unverschlüsselten Passwörter aus der Tabelle mail_users entfernen? Dieser Schritt kann nicht rückgängig gemacht werden! Die Einstellung für das Speichern der E-Mail Konten Passwörter in Klartext wird hierbei ebenfalls deaktiviert.';
$lng['admin']['configfiles']['overview'] = 'Übersicht'; $lng['admin']['configfiles']['overview'] = 'Übersicht';
$lng['admin']['configfiles']['wizard'] = 'Assistent'; $lng['admin']['configfiles']['wizard'] = 'Assistent';
$lng['admin']['configfiles']['distribution'] = 'Distribution'; $lng['admin']['configfiles']['distribution'] = 'Distribution';