Advertisement:

Author Topic: Change it to what?  (Read 2903 times)

stanjensen

  • Newbie
  • *
  • Posts: 16
Change it to what?
« on: August 25, 2013, 01:06:05 am »
?

dev101

  • Osclass Hero
  • Hero Member
  • *
  • Posts: 2155
  • osclass.work
Re: Change it to what?
« Reply #1 on: August 25, 2013, 02:27:04 am »
I used randomly generated number...

stanjensen

  • Newbie
  • *
  • Posts: 16
Re: Change it to what?
« Reply #2 on: August 25, 2013, 02:16:21 pm »
Can you  please type slower and more details.?

IE how is that fixed, what do you adjust, and where?

osCanyon

  • Hero Member
  • *****
  • Posts: 701
  • osCanyon, the class of Osclass
Re: Change it to what?
« Reply #3 on: August 25, 2013, 05:31:46 pm »
you have to open the index.php file in the payment plugin, you will see some text saying change this, you can type ANYTHING your heart desires, a verse, a poem, a famous quote, a random sequence of random characters. save the file and your done .
so here in the index file
define('PAYMENT_CRYPT_KEY', 'randompasswordchangethis');
randompasswordchangethis is the example put what you want and save it
Be SURE NOT to remove the single quotes '  ' that are there
hope this answers your question better  ::)

_CONEJO

  • Administrator
  • Hero Member
  • *****
  • Posts: 4689
Re: Change it to what?
« Reply #4 on: August 26, 2013, 10:42:18 am »
DigitalConcepts is right.

All the information of the plugin is stored in the database, we encrypt that data with an additional hardcoded password/key. Said kay is in the oc-content/plugins/payment/index.php file
Code: [Select]
define('PAYMENT_CRYPT_KEY', 'randompasswordchangethis');

You need to change randompasswordchangethis to whatever you want to, so in the case a hacker has access to your database's content, it will not know what your paypal/other payments information is.

Why we do this?
Because we consider your payment information very important, if a hacker get access to your Paypal information for example, he could make payments or empty your account. So if you change the default password, the hacker will need access to your database AND your file server, which make things a little more complicated.

dev101

  • Osclass Hero
  • Hero Member
  • *
  • Posts: 2155
  • osclass.work
Re: Change it to what?
« Reply #5 on: August 26, 2013, 12:43:36 pm »
_CONEJO is there any practical limitation in the length of the sequence? Also, is space character allowed?

Thank you
« Last Edit: August 26, 2013, 12:48:41 pm by dev101 »

_CONEJO

  • Administrator
  • Hero Member
  • *****
  • Posts: 4689
Re: Change it to what?
« Reply #6 on: August 26, 2013, 01:09:17 pm »
The key has to be 256bits long, if it's shorter it will fill the space with \0, I'm not sure about what will happen if it's longer, but I assume : A.- it will throw an error, or B.- it will cut the key.