<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2600.0" name=GENERATOR></HEAD>
<BODY>
<P><FONT size=2>Hi from France,<BR><BR>Is it normal to have the <FONT
face="Arial Black">'password'</FONT> field in the method <FONT face=Arial><FONT
face="Arial Black">'addImportUser</FONT>(...)</FONT>' not encrypted ?<BR>The
code in the Oracle <FONT face="Arial Black">'CmsDbAccess'</FONT> class looks
like that:<BR><BR>###############<BR><BR><FONT size=3>
<STRONG> </STRONG></FONT><EM><STRONG><FONT face=Arial
size=3> <FONT face="Arial Black"> <FONT
size=2> // crypt the password with
MD5<BR>
statement.setString(3,
checkNull(password));<BR>
statement.setString(4,
checkNull(recoveryPassword));<BR>
statement.setString(5,
checkNull(description));<BR>
statement.setString(6,
checkNull(firstname));<BR></FONT></FONT></FONT></STRONG></EM><BR>###############<BR>but
there's no encryption method called, like in <STRONG><FONT
face="Arial Black">'<EM>addUser</EM>'</FONT></STRONG>.</FONT></P>
<P><FONT size=2>Maybe the call to the method <EM><FONT face=Arial><STRONG><FONT
face="Arial Black">'digest</FONT>(...)</STRONG></FONT></EM>' is
missing.</FONT></P>
<P><FONT size=2>Regards,<BR><BR>Laurent Vernet<BR>148 Rue Anatole
France<BR>92688 Levallois-Perret Cedex<BR>T: +33 1 55 63 18 17<BR>E:
laurent.vernet@fr.adp.com </FONT></P></BODY></HTML>