Forums / Developer / Get clear password in custom edit handler

"Please Note:
  • At the specific request of Ibexa we are changing this projects name to "Exponential" or "Exponential (CMS)" effective as of August, 11th 2025.
  • This project is not associated with the original eZ Publish software or its original developer, eZ Systems or Ibexa".

Get clear password in custom edit handler

Author Message

Guillaume Kulakowski

Sunday 26 July 2009 10:13:08 am

Hi,

I would like sync the Exponential password with an another script.
The problem is that the two scipts have a different crypto method...

I would like get the password not crypted in a "custom edit handler" for set my other application with it.

The problème is that I haven't clear pasword in the eZContentObjectEditHandler methods...

An idea ?

My blog : http://www.llaumgui.com (not in eZ Publish ;-))
eZC on RHEL : http://blog.famillecollet.com/pages/Config-en
eZC on Fedora : just "yum install php-channel-ezc"

André R.

Sunday 26 July 2009 12:39:43 pm

post params maybe?

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

Steven E. Bailey

Sunday 26 July 2009 1:33:11 pm

The only way(s) I can think of that you can do this is brute force it - which depending on the number of users and their level of sophistication may not be worth it (I have found that using dictionaries and some minor processing on a non-sophisticated user base that about 40% are crackable without breaking a sweat). The only other way is to capture the password when a user logs in and do whatever processing needs to be done at that point in time which is what I guess André was alluding to.

Certified eZPublish developer
http://ez.no/certification/verify/396111

Available for ezpublish troubleshooting, hosting and custom extension development: http://www.leidentech.com

André R.

Sunday 26 July 2009 2:06:18 pm

> at that point in time which is what I guess André was alluding to.

Yes, but as he mentioned edit handler I suggested looping the $_POST variable and find the password value when the user edits his profile. Just make sure you don't do anything when it is the default star values :)

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

Guillaume Kulakowski

Monday 27 July 2009 12:14:53 am

Thx André. In fact, I have do that, but I was find a better way... But if noo better way exist, my function works

My blog : http://www.llaumgui.com (not in eZ Publish ;-))
eZC on RHEL : http://blog.famillecollet.com/pages/Config-en
eZC on Fedora : just "yum install php-channel-ezc"