Zen Cart Logo
Forums / Reports of Security Problems / Hidden Password

Hidden Password

Views: 16

Results 1 to 5 of 5
10 Sep 2015, 14:30
#1
adb34 avatar

adb34

Totally Zenned

Join Date:
Mar 2008
Location:
Brampton, Cumbria, United Kingdom, United Kingdom
Posts:
825
Plugin Contributions:
0

Hidden Password

I have stumbled over a hidden login & password in zen cart. Do you know if it should be there? As I do not how secure this part of your site is I will not put anything here until you say I can.

andy

10 Sep 2015, 14:37
#2
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: Hidden Password

You can either email the concern to [email protected] or you can safely post it in just this section of the forum where only admin staff can read it.

10 Sep 2015, 15:00
#3
adb34 avatar

adb34

Totally Zenned

Join Date:
Mar 2008
Location:
Brampton, Cumbria, United Kingdom, United Kingdom
Posts:
825
Plugin Contributions:
0

Re: Hidden Password

includes -> classes -> HTTP_client.php

line 180```php
// * $params = array( "login" => "tiger", "password" => "secret" );

10 Sep 2015, 15:22
#4
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: Hidden Password

Thanks for reporting that.

Fortunately that's commented-out code which is there simply as an example of how one could pass the necessary data to that function. It's just an example, nothing more.

No security risk at all. Nothing to worry about.

10 Sep 2015, 15:44
#5
adb34 avatar

adb34

Totally Zenned

Join Date:
Mar 2008
Location:
Brampton, Cumbria, United Kingdom, United Kingdom
Posts:
825
Plugin Contributions:
0

Re: Hidden Password

DrByte:

Thanks for reporting that.

Fortunately that's commented-out code which is there simply as an example of how one could pass the necessary data to that function. It's just an example, nothing more.

No security risk at all. Nothing to worry about.

Thanks for the info and that is all good.