Quantcast
Channel: Recent Discussions on osTicket Forums
Viewing all articles
Browse latest Browse all 7550

Still can login after changing secret key in ost_config.php

$
0
0
I'm using ost 1.9.8 in Linux, apache.

I have been hearing the "Encrypt/Decrypt secret key", or SECRET_SALT, is used to decrypt the agent password for logging in to Staff Control Panel.

To clone a new OST installation for testing, i just restored OST data into a NEW database using backup SQL file.
For the ost_config.php, i updated the database connection details to point to the new database.
For the secret key, i purposely made some changes and randomize it again.

However, i found that i still can use the previous agent login ID and SAME password to login to the new installation.

It seems weird to me but i don't understand why i can.

Anyone can explain to me please?

Viewing all articles
Browse latest Browse all 7550

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>