Page 1 of 1

Is there a way to decrypt SHAI passwords when debugging?

Posted: Thu Sep 11, 2008 6:38 pm
by MarkI
Hi,

I hope this isn't a braindead question, but I've misplaced the passwords of some of my test users. I can see them via select * from ac_userpasswords in the db, but they're of course SHAI encrypted. Is there a place in the API or the db where I can see the plain English passwords for a user?

As it stands I'm just rerouting the flow of the code in the debugger to login as these lost test souls.

Many thanks,

Mark

Re: Is there a way to decrypt SHAI passwords when debugging?

Posted: Thu Sep 11, 2008 6:41 pm
by Shopping Cart Admin
Hello Mark,

Per PCI/PABP requirements the passwords are one way only. You can pass in a password to see if it matches, but there isn't a way to decrypt them into clear text.

Re: Is there a way to decrypt SHAI passwords when debugging?

Posted: Fri Sep 12, 2008 7:49 am
by jmestep
This post might help

viewtopic.php?f=44&t=8172

You can also re-set their password from the admin.