CF8 external database hidding password field

pimh 24 Jan, 2025

Hi Max, 

There is one thing I dislike in CF8 compared to CF6 within the usage of an external database. In CF6 the inserted password was hidden, and in CF8 it is visible/readable to anyone having access to the forms setup/builder.

Is it possible to hide this again? Also I think it should not be written to the backup (without check if the user who exports knows the password). This was in CF6 still the risk for the external database password. Hiding the password and not exporting it would increase the security level of the whole system.

Many thanks,Pim

Max_admin 24 Jan, 2025
Answer

Hi Pim

I have set the password field to be of type "password", you may also call a global variable defined in the Chronoforms v8 settings page in the password:

{globals:password_for_db2}
Max, ChronoForms developer
ChronoMyAdmin: Database administration within Joomla, no phpMyAdmin needed.
ChronoMails simplifies Joomla email: newsletters, logging, and custom templates.
pimh 28 Jan, 2025

Hi max, 

Thnx for the response. Your solution to use the globals will indeed hide the password in the forms input, but now it is readable in the globals setting. So also not the safest solution. I would say passwords should always be made unreadable in a view or when saved to file. I still hope there will be a better solution in the future.

I guess I need the latest version of CF8 to indeed have the password input field truely working as a password entry (hidding the inserted characters). 

Kind regards,Pim

Max_admin 28 Jan, 2025

did you try the v8.0.38 update ?

Max, ChronoForms developer
ChronoMyAdmin: Database administration within Joomla, no phpMyAdmin needed.
ChronoMails simplifies Joomla email: newsletters, logging, and custom templates.
You need to login to be able to post a reply.

VPS & Email Hosting 20% discount
hostinger