Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When modifying passwords via the db admin console, the overview screen displays the passwords in clear text until the screen is refreshed #788

Open
DavidiBeMe opened this issue Apr 24, 2023 · 1 comment

Comments

@DavidiBeMe
Copy link

If you enter a password in the auth user table via the _dashboard DB Admin, After saving your record, the password is displayed in the table records list screen until the screen is refreshed, at which point the password is hidden.

This can be easily reproduced in _dashboard by simply modifying a password in the auth_user table.

@mrworm
Copy link
Contributor

mrworm commented Nov 3, 2023

pass

Validated.
Attached an image when I added a character to the end of the password and saved it. Then you are sent back to the list of users, In my example:
http://127.0.0.1:8000/_dashboard/dbadmin?app=fadebook&dbname=db&tablename=auth_user
Last character is visible in the image.
F5 hides the password again.

This is due to the fact that the page is not reloaded when submitting the new / changed password.

I solved that in #824

mrworm added a commit to mrworm/py4web that referenced this issue Nov 4, 2023
Resolves the issue reported in:
web2py#788
@mrworm mrworm mentioned this issue Nov 4, 2023
mdipierro pushed a commit that referenced this issue Nov 5, 2023
Resolves the issue reported in:
#788
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants