The password is stored in a simple settings.php file along with all the other settings, it's hashed using itself as a salt, so
AFAIK it's uncrackable.
Not to mention you can't actually access the file directly.
Also in case you wanted to see here's what the settings file current looks like, with some comments for your convenience:
Code:
<?php
if ($IN_SPEEDCORE == false)
{
header("HTTP/1.0 404 Not Found");
die;
}
else
{
$settings["url"] = "http://localhost/SpeedCore/";
$settings["title"] = "SpeedCore";
$settings["titlesep"] = ' - ';
$settings["logo"] = '<img src="global/images/SpeedCore.png" alt="SpeedCore" />';
$settings["yourname"] = "Bob Smith";
$settings["mainpage"] = "home";
$settings["username"] = "admin";
$settings["password"] = "adpexzg3FUZAk"; // This is the hashed form of "admin"
$settings["email"] = "speedcore@example.com";
$settings["theme"] = "default";
$settings["navlinks"] = "Home,About,Contact";
$settings["newcopy"] = false; // This tells us if it's waiting to be installed/configured (true) or already installed/configured (false).
$debug = false; // This isn't a real setting and will be removed at release, this allows me to execute PHP on the fly.
}
?>
The server includes this on the index.php page, which is the only page you ever use; however I might later make some
SEO options.
Linear Mode
