passwords

How many iterations does the scram-sha-256 setting use in PostgreSQL 10?

冷暖自知 提交于 2019-12-11 03:24:43
问题 How many iterations does the scram-sha-256 setting use in PostgreSQL 10? The docs just say Setting this parameter to scram-sha-256 will encrypt the password with SCRAM-SHA-256. The build log reads. Add SCRAM-SHA-256 support for password negotiation and storage (Michael Paquier, Heikki Linnakangas) This proves better security than the existing md5 negotiation and storage method. 回答1: It's a compile-time variable in scram-common.h known as SCRAM_ITERATIONS_DEFAULT. Currently it's set to 4096.

How to use password_verify function in PHP

给你一囗甜甜゛ 提交于 2019-12-11 03:13:00
问题 I am writing a basic website login script in PHP (login_config.php). My question is: Am I implementing the password_verify() function properly in regards to user security/protection? -Note: Post data is being sent from login.php CODE (LOGIN_CONFIG.PHP): <?php //POST VARIABLES $submit = $_POST['login_submit']; $username = $_POST['login_username']; $password = $_POST['login_password']; $email = $_POST['login_email']; require 'password_config.php'; if(isset($submit)){ require 'db/connect.php'; /

WebMatrix Helper controlled table showing wrong time in Password Change Date field

∥☆過路亽.° 提交于 2019-12-11 02:49:41
问题 everyone, I have a quick question. Can anyone tell me why the field "PasswordChangeDate" in the helper controlled table "webpages_Membership" (automatically filled using the Web.Security Helper, I'm pretty sure) is logging a date/time that is 5 hours off? I just changed my password and looked at the field and saw that while I had changed my password at 10:50 AM, it showed 3:50 PM. Is there a setting somewhere (possibly for time zone, etc.) that I need to adjust within the Web.Security helper?

check password for digits and letters

淺唱寂寞╮ 提交于 2019-12-11 02:21:32
问题 I have problem with two of my methods for password validation. The method hasDigitsAndLetters is supposed to check whether all the characters of the String are digits and letters and the second method hasTwoDigits is supposed to check whether there are at least two digits in the pass, but the problem is that for expected result true they are ruturning false. If someone can help. here is the code. //check if the whole string consists of digits and letters public static boolean

Passcode on resume from background

扶醉桌前 提交于 2019-12-11 02:04:02
问题 i have a question if there is decent way to handle this situation: i would like my app to launch passcode activity as soon as application is launched for very first time or then user resumes it from background (for example user clicks home button and moves application into background and then launches it again). I know i can do this using special permissions and granting access to system tasks, but i don't want to do this way. Also some of you will suggest to use onPause, onResume and onStop

default value for asp.net textbox -> TextMode = password

拟墨画扇 提交于 2019-12-11 01:54:25
问题 please see the link below : https://www.boot-loader.com/eng how does default password in that link work? how can i have a default value such as "password" string for textbox below (with asterisks) : <asp:TextBox ID="headertxtPassWord" runat="server" Text="password" CssClass="header-login-input" ValidationGroup="A" TextMode="Password"></asp:TextBox> 回答1: Ok I think I did not understand you correctly. Here you can find the answer with some background and explanation Basically the point is that

How would you implement salted passwords in Tomcat 5.5

吃可爱长大的小学妹 提交于 2019-12-11 01:44:29
问题 My web application is relying on container-managed security and I'm wondering if it's possible to use salted passwords at all. As far as I can tell it's easy enough to store digested passwords in a database by just configuring a JDBC or DataSource Realm, but there's no way to add a salt to those digest. Any suggestions? Edit: it seems I just need to think some more before asking questions ;-) It's just a matter of choosing who's doing the digest calculation (client or server) and configure

Sending password safely from the front-end to the back-end using MD5

喜欢而已 提交于 2019-12-11 01:04:13
问题 I've encrypted a password field in my DB by MD5, and I handle it encrypted in my back-end, but when user types their password in, it is in plain text. Is there a safe way to pass the password from the front-end to the back-end? MD5 doesn´t have sense in this case... NOTE: I'm using HTTPS and the POST Method. 回答1: You can think about the following steps to protect the password: Use HTTPS preferably with HSTS to protect the passwords during transport; Use a password hash such as bcrypt instead

How can I suppress Excel's password prompt in Perl?

删除回忆录丶 提交于 2019-12-11 00:53:23
问题 Please tell me a solution to suppress passsword prompting of an excel file. use Win32::OLE; my $xlApp = Win32::OLE->new('Excel.Application'); $xlApp->{Visible} = 0; $xlApp->{DisplayAlerts} = 0; # Open excel file. my $xlBook = $xlApp->Workbooks->Open("C:\\Documents and Settings\\username\\Desktop\\testfile.xls"); my $Sheet1 = $xlBook->Worksheets(1); my $row = 1; my $col = 1; $Sheet1->Cells($row,$col)->{'Value'} = 5; if (Win32::OLE->LastError) { print "File protected"; } $xlBook ->Close();

Triggering the Change Saved Password dialog in firefox

最后都变了- 提交于 2019-12-11 00:49:33
问题 I am implementing a change password ui, but when I change the password, the dialog that firefox's password manager displays to change the saved password doesn't appear. I can't find the documentation on what is required for the form fields to trigger this behavior. If anyone has the resource that goes through how firefox decides when to display the change saved password dialog that would be helpful. 来源: https://stackoverflow.com/questions/1934558/triggering-the-change-saved-password-dialog-in