New Zenner
- Join Date:
- Jun 2019
- Location:
- Austin TX
- Posts:
- 65
- Plugin Contributions:
- 0
How should 'customers_secret' be handled in upgrade?
I'm moving a 1.5.6b database into a fresh install of 1.5.8 and everything has been working well so far but I noticed that 'customers_secret' was not a column in the old database and that it is not nullable in the new database. I was able to properly import the old data without issue but I was wondering if that was creating a security issue since every customer's secret is just an empty varchar(64). Does that mean customer accounts are at risk of unauthorized password resets if someone tries to enter a blank secret to reset an account's password?