This plugin will never download the users password, or ANYTHING else from your database. In fact, there is actually no communication from your database to ours what so ever. All info is sent via passkeys and ? codes. I save the Username and UserID so that it displays properly on your forum, otherwise, all other user info is entered by the user into vHoist.com
I have integrated a "password check" that I may use later down the road in the vHoist.php file in order to confirm an identy of a user, incase there is a situation that will ever require that. I figured Secuirty might be an issue for some and it's on my list to add.
The password check is in the .php file and is on line 72. Feel free to erase it if you want, it currently does nothing and will likely be an added secuirty check in the future that will be optional.
If you don't like the plugin, you can uninstall it and there are absolutely no database changes or effects. Erase the vHoist.php file if you feel the need.
|