CF8 external database hidding password field

Hide password field in ChronoForms v8 external database setup.

Overview

In ChronoForms v8, the password for an external database connection is visible in plain text within the form builder, unlike in version 6 where it was hidden.
Update to ChronoForms v8.0.38 or later, where the password field type has been corrected to mask the input, or define the password as a global variable in the settings.

Answered
ChronoForms v8
pi pimh 24 Jan, 2025

Hi Max, 

There is one thing I dislike in CF8 compared to CF6 within the usage of an external database. In CF6 the inserted password was hidden, and in CF8 it is visible/readable to anyone having access to the forms setup/builder.

Is it possible to hide this again? Also I think it should not be written to the backup (without check if the user who exports knows the password). This was in CF6 still the risk for the external database password. Hiding the password and not exporting it would increase the security level of the whole system.

Many thanks,Pim

Max_admin Max_admin 24 Jan, 2025
Answer

Hi Pim

I have set the password field to be of type "password", you may also call a global variable defined in the Chronoforms v8 settings page in the password:

{globals:password_for_db2}
Max, ChronoForms developer
ChronoMyAdmin: Database administration within Joomla, no phpMyAdmin needed.
ChronoMails simplifies Joomla email: newsletters, logging, and custom templates.
pi pimh 28 Jan, 2025

Hi max, 

Thnx for the response. Your solution to use the globals will indeed hide the password in the forms input, but now it is readable in the globals setting. So also not the safest solution. I would say passwords should always be made unreadable in a view or when saved to file. I still hope there will be a better solution in the future.

I guess I need the latest version of CF8 to indeed have the password input field truely working as a password entry (hidding the inserted characters). 

Kind regards,Pim

Max_admin Max_admin 28 Jan, 2025

did you try the v8.0.38 update ?

Max, ChronoForms developer
ChronoMyAdmin: Database administration within Joomla, no phpMyAdmin needed.
ChronoMails simplifies Joomla email: newsletters, logging, and custom templates.
This topic is locked and no more replies can be posted.