Haven't had time to look at the code or much of this module yet..
Is the data, login credentials, etc, encrypted at all? Is there any attempt to be secure?
| Comment | File | Size | Author |
|---|---|---|---|
| #3 | 808274-salesforcewebform_aes_encryption_2.patch | 4.17 KB | dafeder |
| #2 | 808274-salesforcewebform_aes_encryption.patch | 4.17 KB | dafeder |
Comments
Comment #1
obsidiandesign commentedThe data for the SF login is stored in plaintext; it seems that the Salesforce module (#477182: Encrypt API password and token) is going through the same process right now in terms of dealing with the plaintext data storage. The original client that the module was created for was OK with storing the login credentials in plaintext in the database; if someone would like to port the ability to use AES encryption like is being done for the Salesforce module, I would welcome it. If there's not anyone to step up, then I'll put it on my June task list.
Bryan O'Shea
Obsidian Design
Comment #2
dafederHere is my crack at this.
Comment #3
dafederSome problems with that patch - try this one.
Comment #4
EvanDonovan commented1 year later - has functionality like this been added, or is this patch still needing review for it to be added?