ProductCart Shopping Cart Software Forums : Security Problem https://forum.productcart.com/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Sat, 11 Apr 2026 08:01:35 +0000 Tue, 17 Mar 2015 14:57:51 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.04 360 https://forum.productcart.com/RSS_post_feed.asp?TID=5989 <![CDATA[ProductCart Shopping Cart Software Forums]]> https://forum.productcart.com/forum_images/pc_logo_50.png https://forum.productcart.com/ <![CDATA[Security Problem : Hi Craig,The Reset/Forgot Password...]]> https://forum.productcart.com/security-problem_topic5989_post22375.html#22375 Author: ProductCart
Subject: 5989
Posted: 17-March-2015 at 2:57pm

Hi Craig,

The Reset/Forgot Password methodology is being rewritten in ProductCart v5.2 (ETA Q3) to use a "one-way" approach that will send a message to the account-holder's e-mail address which contains a link and instructions for changing or resetting their password.

]]> Tue, 17 Mar 2015 14:57:51 +0000 https://forum.productcart.com/security-problem_topic5989_post22375.html#22375 <![CDATA[Security Problem : Hi everyone,It has just came to...]]> https://forum.productcart.com/security-problem_topic5989_post22373.html#22373 Author: utopiac
Subject: 5989
Posted: 16-March-2015 at 4:57pm

Hi everyone,

It has just came to my attention that when a user requests a password reminder form Product Cart the password is sent to the customer via email unhashed. 

Does anyone know of a way to change this?

Thanks in advance,

Craig
]]> Mon, 16 Mar 2015 16:57:34 +0000 https://forum.productcart.com/security-problem_topic5989_post22373.html#22373