Get clear password in custom edit handler

Author Message

Guillaume Kulakowski

Sunday 26 July 2009 10:13:08 am

Hi,

I would like sync the eZ Publish password with an another script.
The problem is that the two scipts have a different crypto method...

I would like get the password not crypted in a "custom edit handler" for set my other application with it.

The problème is that I haven't clear pasword in the eZContentObjectEditHandler methods...

An idea ?

My blog : http://www.llaumgui.com (not in eZ Publish ;-))
eZC on RHEL : http://blog.famillecollet.com/pages/Config-en
eZC on Fedora : just "yum install php-channel-ezc"

André R.

Sunday 26 July 2009 12:39:43 pm

post params maybe?

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

Steven E. Bailey

Sunday 26 July 2009 1:33:11 pm

The only way(s) I can think of that you can do this is brute force it - which depending on the number of users and their level of sophistication may not be worth it (I have found that using dictionaries and some minor processing on a non-sophisticated user base that about 40% are crackable without breaking a sweat). The only other way is to capture the password when a user logs in and do whatever processing needs to be done at that point in time which is what I guess André was alluding to.

Certified eZPublish developer
http://ez.no/certification/verify/396111

Available for ezpublish troubleshooting, hosting and custom extension development: http://www.leidentech.com

André R.

Sunday 26 July 2009 2:06:18 pm

> at that point in time which is what I guess André was alluding to.

Yes, but as he mentioned edit handler I suggested looping the $_POST variable and find the password value when the user edits his profile. Just make sure you don't do anything when it is the default star values :)

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

Guillaume Kulakowski

Monday 27 July 2009 12:14:53 am

Thx André. In fact, I have do that, but I was find a better way... But if noo better way exist, my function works

My blog : http://www.llaumgui.com (not in eZ Publish ;-))
eZC on RHEL : http://blog.famillecollet.com/pages/Config-en
eZC on Fedora : just "yum install php-channel-ezc"

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.

eZ debug

Timing: Jan 18 2025 16:04:52
Script start
Timing: Jan 18 2025 16:04:52
Module start 'layout'
Timing: Jan 18 2025 16:04:52
Module start 'content'
Timing: Jan 18 2025 16:04:53
Module end 'content'
Timing: Jan 18 2025 16:04:53
Script end

Main resources:

Total runtime0.6733 sec
Peak memory usage4,096.0000 KB
Database Queries65

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0049 589.4766152.6406
Module start 'layout' 0.00490.0070 742.117239.4766
Module start 'content' 0.01190.6599 781.5938617.1719
Module end 'content' 0.67180.0014 1,398.765616.1250
Script end 0.6732  1,414.8906 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00681.0086160.0004
Check MTime0.00130.1975160.0001
Mysql Total
Database connection0.00060.082610.0006
Mysqli_queries0.611190.7691650.0094
Looping result0.00060.0832630.0000
Template Total0.642195.420.3210
Template load0.00190.278720.0009
Template processing0.640295.090220.3201
Template load and register function0.00010.014310.0001
states
state_id_array0.00070.105910.0007
state_identifier_array0.00080.113720.0004
Override
Cache load0.00160.2333230.0001
Sytem overhead
Fetch class attribute can translate value0.00050.071030.0002
Fetch class attribute name0.00130.197480.0002
XML
Image XML parsing0.00150.223130.0005
class_abstraction
Instantiating content class attribute0.00000.0027100.0000
General
dbfile0.00110.1623310.0000
String conversion0.00000.001040.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1node/view/full.tplfull/forum_topic.tplextension/sevenx/design/simple/override/templates/full/forum_topic.tplEdit templateOverride template
5content/datatype/view/ezimage.tpl<No override>extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tplEdit templateOverride template
5content/datatype/view/ezxmltext.tpl<No override>extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tplEdit templateOverride template
6content/datatype/view/ezxmltags/paragraph.tpl<No override>extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tplEdit templateOverride template
1content/datatype/view/ezxmltags/line.tpl<No override>design/standard/templates/content/datatype/view/ezxmltags/line.tplEdit templateOverride template
1print_pagelayout.tpl<No override>extension/community/design/community/templates/print_pagelayout.tplEdit templateOverride template
 Number of times templates used: 19
 Number of unique templates used: 6

Time used to render debug report: 0.0001 secs