Encrypt configuration
This plugin is an alternative to SSL. It uses RSA to encrypt passwords or any other data you want in your component.
It is recommended to have the bcmath extension installed, otherwise DES algorithm is used.
Works with Signal Login, JTP Horizontal Login, PWC Login, Inline Login and vtj login modules.
For other Joomla extensions, like Alpha Registration, Community Builder, Core Design Login Module, Yoo Login, YJ Pop Login Module you can find plugins at http://www.ratmilwebsolutions.com/downloads/encryption-plugins.html.
No need to set up. Just install it and install the required plugins.
Downloaded the Jomsocial plugin and the component and within 5 minutes was up and running.
Great component and thanks for your contribution to the community.
The software works without flaw
and performs exactly as described.
Cons: None
Thank you for contributing your excellent work.
And thank you for volunteering. All the Best!
Really good component, installs and works straight away without any configuration at all. Can't ask for much more than that! Thanks.
I would also like to refer to the @alexishoop comment above: I think that is to easy to judge someone's work. The stats on my web pages show that 98% of the users browser supports java. Joomla Extensions are created for specific purposes. The author does not mention in the description of the component that this is a universal solution for all web sites based on Joomla. I believe that in specific web projects this extension is ideal. What's more, the author provides his work for free. Especially in view of the foregoing should be five stars!
Thanks to you and the rest for all the reviews.
How can I test whether the encryption works or not. I can not see any changes in the login mask. Not in the Back-end or Front-end !
Answer:
"you can notice it is working because the password
field gets filled with more dots than the ones you entered."
Excellent product and support !
Javascript disabled these days?...... Are you kidding?
But you are right, that´s up to the user's choice. But in case you have it disabled you will just log in as if the plugin was not installed.
About autofill, that´s a real issue, I am working on that. Security has always been against ease of use.
But if you really care about protecting your password, I would recommend it for the back-end.
And if you really, really care about security. Get yourself a certificate. SSL is the ideal solution for security. Because it gives you more than just the fact of protecting data from client to server.
But this plugin works well for that. It is cheaper and easier to use, not to mention that it doesn´t encrypt the whole data transfer (making server response slower) including what you don't need to protect.
And on top of that, you can generate new encryption keys as many times (I recommend it) and as long in bits (better 512 or 1024 if your host is good enough) as you want very easily. FOR FREE!!!
I have found a few good sites with no protection for their admin password, not using SSL. And then their admins surprise when they find their site has been hacked.
I would like to thank you and the rest of the community for their reviews, suggestions, bugs reports, etc. You have helped me a lot.
For next version:
- Encryption keys will be automatically generated frequently, like once or twice a year or as often as the user want.
- Workaround for autofill issue.
- Encryption keys encrypted in database.
Thank you :-)