Registration with phone number

does any 1 knows how to allow users to register with their mobile number? just like facebook does am waiting fellas

Quote · 13 Aug 2013

That's pretty scary that Facebook knows everyone's cell, they must have access to Verizon, ATT and Sprint database.

Vunderba..... Challenge Yourself to be the Best...... Hosting from Zarconia.net
Quote · 13 Aug 2013

Maybe they have caller ID

Vunderba..... Challenge Yourself to be the Best...... Hosting from Zarconia.net
Quote · 13 Aug 2013

Yes, I agree that Facebook is a scary thing.  People are allowing Facebook to connect to their mobile devices and sync contacts.  So even if you are not on Facebook, if you know someone that is on Facebook , you are on Facebook.

Geeks, making the world a better place
Quote · 13 Aug 2013

Hello please i need answer please Yell

Quote · 16 Jan 2014

You'd just need to alter the login function, session handling and maybe make the phone number row unique. You know whats more scary than facebook having your phone number? Your password being md5'd and included in the session cookie, yet nobody has complained to BoonEx about that!

Quote · 17 Jan 2014

 

You'd just need to alter the login function, session handling and maybe make the phone number row unique. You know whats more scary than facebook having your phone number? Your password being md5'd and included in the session cookie, yet nobody has complained to BoonEx about that!

It is not just md5'd, it is md5/sha1/salted

Please show the security issue; the proof of concept that the password can be stolen.  If this can be done, then the black hats already know and thus you can tell us as well.

Geeks, making the world a better place
Quote · 17 Jan 2014

 

 

You'd just need to alter the login function, session handling and maybe make the phone number row unique. You know whats more scary than facebook having your phone number? Your password being md5'd and included in the session cookie, yet nobody has complained to BoonEx about that!

It is not just md5'd, it is md5/sha1/salted

Please show the security issue; the proof of concept that the password can be stolen.  If this can be done, then the black hats already know and thus you can tell us as well.

 Every password hashed with that method is vulnerable to being decrypted, there have been several hacked Dolphin websites with each user's password being compromised. You can't seriously think the current implementation is secure. Furthermore, storing the hashed password and user id in a cookie which can be manipulated and or stolen. The fact that BoonEx has made CSRF tokens optional is another thing, I have never seen that before. Why wouldn't you want CSRF tokens on your forms?

Quote · 17 Jan 2014

I don't know.  However, I would still like to see the proof of concept; not just that Dolphin sites have been hacked.  If the demo.boonex did not reload so fast, we could test that there.  I could create a new account and you could hack my password.  post the proof of concept here and let us try it and see.

Geeks, making the world a better place
Quote · 17 Jan 2014
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.