GSconfig UI [v0.3]

[Tyblitz]

Big security flaw with GSLOGINSALT.
To all who install, please comment out line 31:

Code:

add_action('successful-login-start', 'gsconfig_ui_setpwd');

I didn't test this with random usernames & passwords, and it turns out any newly set password is saved, even by a random user.  I'll release GSconfig UI 0.2.2 without this hook and setting login salts will be as troublesome as before, but at least security won't be compromised. I'll try to figure something out later to make it work properly. Is there any way to 'suspend' file downloads in Extend?


EDIT: Fixed.