v3 - add defaultPassword to config

Question

v3 - add defaultPassword to config

tiptronic opened this issue 6 years ago · comments

add defaultPassword parameter to config.js

scriptPilot · Answer 1 · Sun Jan 13 2019 22:05:26 GMT+0800 (China Standard Time)

@tiptronic - I think storing passwords in plain text is a very unsecure architecture. So, if you have all other data as defaults ... only the password is to enter ... i think thats acceptable :-)

Andy Fuchs · Answer 2 · Mon Jan 14 2019 01:06:59 GMT+0800 (China Standard Time)

@scriptPilot Adding the ability doesn't mean, the user is FORCED to save his/her password.
If a user doesn't want to store it's password, he can leave the field just empty.
Removing the defaultPassword-option removes the ability to deploy automatically (or patch the files after every update, with is even worse).

And since the option is given in the ftp-deploy package, it seems to be some common behavior.

btw - in every Wordpress installation, the password is stored in the config file.