Anti uninstall passwords are stored in plaintext, making it easy to bypass

[will3graa1]

When you enable the anti uninstall mode with password protection, the app still allows you to create backups. The backups contain an anti_uninstall.xml file, which contains the password effectively stored in plaintext.

If a user wishes to bypass the blocking, they can simply create a backup and copy the password using a text editor that can read .xml files.

A better approach might be to store the password as a hash in the app and compare the hash of the user input to the stored hash whenever entering the password (which would mean the backups would contain this hash instead of the whole password).

[yoann256]

if you don't know, every text editor can read xml files as long as they're readable, but anyways it would be cool