Project:Salesforce Webform Data Integration
Version:6.x-1.2
Component:Code
Category:feature request
Priority:normal
Assigned:Unassigned
Status:needs review

Issue Summary

Haven't had time to look at the code or much of this module yet..

Is the data, login credentials, etc, encrypted at all? Is there any attempt to be secure?

Comments

#1

The data for the SF login is stored in plaintext; it seems that the Salesforce module (#477182: Encrypt API password and token) is going through the same process right now in terms of dealing with the plaintext data storage. The original client that the module was created for was OK with storing the login credentials in plaintext in the database; if someone would like to port the ability to use AES encryption like is being done for the Salesforce module, I would welcome it. If there's not anyone to step up, then I'll put it on my June task list.

Bryan O'Shea
Obsidian Design

#2

Status:active» needs review

Here is my crack at this.

AttachmentSize
808274-salesforcewebform_aes_encryption.patch 4.17 KB

#3

Some problems with that patch - try this one.

AttachmentSize
808274-salesforcewebform_aes_encryption_2.patch 4.17 KB
nobody click here