Laurent Chouraki
My feedback
22 results found
-
64 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.— rk
Laurent Chouraki
supported this idea
·
-
9 votes
Thank you for your input. We will consider this functionality in upcoming releases if it is popular. Everyone, please continue voting for this feature if you consider it important.
—
IGAn error occurred while saving the comment -
22 votes
Thank you for your input. We will consider this functionality in upcoming releases if it is popular. Everyone, please continue voting for this feature if you consider it important.
—
IGLaurent Chouraki
supported this idea
·
-
1,320 votesLaurent Chouraki
supported this idea
·
-
1 vote
Thank you for your input. We are already working on storing only password hashes, rather than actual passwords. I cannot provide any ETA at this moment.
-- SH
An error occurred while saving the comment Laurent Chouraki
commented
Great !
Laurent Chouraki
supported this idea
·
An error occurred while saving the comment Laurent Chouraki
commented
A small script to replace cleartext password with hashs.
(not a real solution)#!/bin/bash
# Dangerous script for Plesk
# Search for mail user with plaintext password using mail_auth_view
# Replace the plaintext password with hashed password# Remaining problems :
# If user change his password, it's again in plaintext
# The script is slow, if the user change it's password while the script is running the change will be lost
# Tested only on Debian 12.8 Plesk Obsidian 18.0.65# Filter to apply only to a domain or a mail account
filter=$1
# Set action to DOIT to replace password
action=$2if [ -z "$filter" ]
then
echo "Usage : $0 @domain.tld"
exit
fi# Get all mails and appy filter
echo "Search mail account, using filter $filter"
mails=$(plesk bin mail --list | grep -E "^Mail name" | cut -f2 | grep -E $filter)
echo Accounts founds : $mails
echo# For each mail
for mail in $mails ; do
authview=$(plesk sbin mail_auth_view | grep -E "^\| +$mail \| \| +.+ \|$")
if [ "$?" != 0 ]
then
echo OK:$mail
else
echo FOUND cleartext password for $mail
# cut the left part "| mail@domain.tld | |"
authview=$(echo "$authview" | sed "s/^\x7c *$mail \x7c \x7c *//")
# cut the rigth part " |"
password=$(echo "$authview" | sed "s/ \x7c$//")
# Calculate hashed password
password_c=$(openssl passwd -6 "$password")
# For debuging purpose
# echo "Account $mail : password \"$password\" hashed \"$password_c\""
if [ "$action" == "DOIT" ]
then
echo "Changing account $mail password with hashed version"
plesk bin mail --update $mail -passwd_type encrypted -passwd $password_c
fi
# Clear password (paranoid :-)
authview=""
password=""
password_c=""
fi
doneLaurent Chouraki
shared this idea
·
-
4 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular. Everyone, please continue voting for this feature if you consider it important.
—
IGLaurent Chouraki
supported this idea
·
-
7 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
— AY
Laurent Chouraki
supported this idea
·
-
7 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IGLaurent Chouraki
supported this idea
·
-
24 votes
We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
-- PD
Laurent Chouraki
supported this idea
·
-
7 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IGLaurent Chouraki
supported this idea
·
-
31 votes
Thank you for your input! We will consider this functionality for the upcoming releases if it becomes popular enough.
Everyone, please continue voting for this feature if you consider it important.
—
IGLaurent Chouraki
supported this idea
·
-
9 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IGLaurent Chouraki
supported this idea
·
-
6 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IGLaurent Chouraki
supported this idea
·
-
4 votes
Thank you for your input. We will consider this functionality in upcoming releases if it is popular. Everyone, please continue voting for this feature if you consider it important.
—
IGLaurent Chouraki
supported this idea
·
-
8 votes
Thank you for your input! We will consider this functionality in upcoming releases if it is popular. Everyone, please continue voting for this feature if you consider it important.
—
IGLaurent Chouraki
supported this idea
·
-
3 votes
Thank you for your idea! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
-- PD
Laurent Chouraki
supported this idea
·
-
2 votes
Thank you for your idea! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
Here I'd like to add, though, that in the real world attackers simply test a website against all known vulnerabilities, regardless what webserver, PHP or other software version they detect. Actually, such version information are of no interest, they simply drive tests against all known flaws. So adding the feature will probably not help against hacking attempts.
-- PD
Laurent Chouraki
supported this idea
·
-
13 votes
Thank you for your idea! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
-- PD
Laurent Chouraki
supported this idea
·
-
2 votes
Thank you for your input! We will consider this functionality in upcoming releases if it becomes popular.
Everyone, please continue voting for this feature if you consider it important.
-- SH
Laurent Chouraki
supported this idea
·
-
28 votesLaurent Chouraki
supported this idea
·
Hello,
It's possible on Linux with plesk sbin pci_compliance_resolver {--enable|--disable} [<service>]
See https://docs.plesk.com/fr-FR/obsidian/administrator-guide/administration-de-plesk/s%C3%A9curiser-plesk/conformit%C3%A9-pcidss/plesk-pour-linux-rendre-plesk-conforme-%C3%A0-la-norme-pci-dss.78899/
Regards.