Repository navigation
QT Desktop APP should not store password in plain text #1632
Description
Activity
I'll welcome pull request regarding that improvement :)
Users also can choose do not store password also.
Or they can use just electron version of the app.- changed the title
[-]Unsecure authentication[/-][+]QT Desktop APP should not store password in plain text[/+]on Mar 16, 2021
livehelperchat/lhc_web/modules/lhxml/checklogin.php
Line 11 in 080e86e
Desktop app (Qt) uses this for authentication. It would be better if checklogin.php would use hashed password for validation (hashed and then received by checklogin.php with POST) instead of plain text. This way the real password would never be stored as plain text on client side (Desktop app settings.xml).