MySQL DB password in config.ini

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Dominion
    Member
    • Feb 2016
    • 38

    #1

    MySQL DB password in config.ini

    Hello,
    I've just finished migration to new server, restored everything from backups fine. But, I found that my login and password in config.ini are stored in plane text. Could you please direct me how to fix it and to put hashed password there.
  • Maximus
    Senior Member
    • Nov 2018
    • 2731

    #2
    Hi,
    There is no such an ability. But don't bother with it. This file is available locally.

    Comment

    • yuri
      EspoCRM product developer
      • Mar 2014
      • 9641

      #3
      If we hashed the password we would need to store the key in the file. This negates the benefit of hashing.

      Comment

      • Dominion
        Member
        • Feb 2016
        • 38

        #4
        Ok, guys, please, to be clear: is it Ok, by design, to store the DB login and password in config.ini in plain text, or I have just messed something up?

        Comment

        • yuri
          EspoCRM product developer
          • Mar 2014
          • 9641

          #5
          Yes. It's OK.

          Just make sure the file is not accessible (it should not unless you misconfigured your server).

          Comment

          • Dominion
            Member
            • Feb 2016
            • 38

            #6
            Thanks!

            Comment

            Working...