Opened 17 years ago
Last modified 17 years ago
#3226 closed Bug report
Export SiteManager Password in Plain Text
| Reported by: | apmuthu | Owned by: | |
|---|---|---|---|
| Priority: | normal | Component: | FileZilla Client |
| Keywords: | Cc: | apmuthu, Tim Kosse | |
| Component version: | Operating system type: | ||
| Operating system version: |
Description
In FileZilla v2.x the FileZilla.xml had the Passwords MD5 hashed. In FileZilla 3, the XML files are stored in the %USER%/Application Data/FileZilla folder.
The sitemanager.xml file stores the passwords in Plain Text and not as a MD5 Hashed value.
If the SiteManager settings are exported, we find the passwords stored as plain text in the exported file.
Atleast sitemanager.xml should have the passwords hashed.
Note:
See TracTickets
for help on using tickets.
The client never hashed passwords. Besides, hashes aren't reversible so that's not even an option in the first place.
THe reason for plain text in FZ3 is simple: It's the task of the operating system to protect the user's files.