Passwords from ocsinventory-server.conf and dbconfig.inc.php

Question

Hi,

I was wondering if the passwords from xampp\apache\conf\extra\ocsinventory-server.conf and xampp\htdocs\ocsreports\dbconfig.inc.php can be hiden/encrypted somehow, or if this can be a security issue...

Thank you

Answer 1

It's only a security issue if your windows is not secure. It's not possible to retrive the password by remote connexion on OCS.

Encrypt the password is not possible : if we do a not reversible hash, the connexion will not be possible. If we do a reversible encryption, if someone can get the password, he can get the private key for reversing the password.