Why does world.getalphaoption ("password") return a plaintext string? I'm not so sure about this and password security.
AlphaOption
Posted by Johnathan Allen on Mon 01 Dec 2003 10:26 AM — 4 posts, 20,545 views.
Maybe this is so that scripts can send the password in case the MUD has a non-standard? I think this issue was discussed not so long ago... maybe searching on the forum for password or something will bring up the other thread.
Only your main script can do this, plugins are denied the password. This should help maintain some security at least.
What would you have it return? If it was base-64 encoded then one more line in the script would decode it.
If you are worried a rogue script might mis-use it, then don't use scripts written by other people.
As Ksilyan points out, you cannot get the password from a plugin, so it has to be something in your main script file.
If you are worried a rogue script might mis-use it, then don't use scripts written by other people.
As Ksilyan points out, you cannot get the password from a plugin, so it has to be something in your main script file.