advertisement

PrestaShop Accused of Crappy Password Security

PrestaShop Accused of Crappy Password Security

2015-12-16 14:55

The e-commerce platform is said to have horrible security measures in place to protect customers' passwords.

Users of the e-commerce platform PrestaShop have reached out to Ecomony highlighting an article written by the site Weblind. The article in question puts PrestaShop's password security under scrutiny.

Even though PrestaShop hashes customers' passwords they are said to do a very poor job in the security department. The passwords are hashed using the outdated MD5-algorithm and are only hashed once, no iterations.

More troubling is the fact that the salt, the string that is supposed to make attacks using a Rainbow table impossible, is static. Static as in the same salt is used sitewide, not unique per password which is the right way to do it according to Weblind.

advertisement
advertisement

Passwords Almost in Clear Text

These choices is said to make a database of user passwords breakable within one day, for an experienced attacker. This vulnerability is also said to be present in all of PrestaShop's over 250 000 e-commerce stores.

Weblind does however state that you can never create something that is unbreakable. All passwords can be cracked. It is however the platform's job to make it hard and time consuming. Using the setup that PrestaShop uses for storing passwords is making it way too easy to break the customers' passwords.

- If a hacker can be able to get a large part of the website’s users passwords within a day, I’d say that is almost as bad as the website storing the passwords in clear text, writes Weblind.

Julius Gunnilstam

Editor-in-chief

Born computer engineer - today e-commerce expert and the leader of the editorial team at Ecomony. Been writing about e-commerce for six years.

advertisement
Swedish Government to Outlaw Online Alcohol

Swedish Government to Outlaw Online Alcohol

Sweden is trying to restrict the free movement of goods within the EU.

Amazon.de Launches Free Delivery for 6 New Countries

Amazon.de Launches Free Delivery for 6 New Countries

Germany is looking to be the base for the company to take on Europe as free delivery expands to the Czech Republic, Denmark, Sweden, Finland, Hungary and Slovakia.

advertisement
advertisement
Alibaba Invests $1 Billion in Lazada

Alibaba Invests $1 Billion in Lazada

Alibaba now controls Rocket Internet's Amazon-clone in Southeast Asia.

Volvo Looking to Expand In-Car Deliveries

Exclusive: Volvo Looking to Expand In-Car Deliveries

The trunk deliveries of tomorrow are already here and now they are expanding in Europe.

advertisement
advertisement

Don't miss out on our weekly newsletter

Best Buy Expands Same-Day Delivery in 11 More Markets

Best Buy Expands Same-Day Delivery in 11 More Markets

The retail chain now offers the service in 13 US metropolitan areas covering 70% of the US population.

USA

"Virtual Reality Will Be an Integrated Part of Our Lives"

The Swedish furniture-retail giant Ikea wants its customers to furnish their homes before hitting the buy button.

Big Expansion of Amazon's Free Same-Day Service

Big Expansion of Amazon's Free Same-Day Service

Amazon's free same-day delivery service for its Prime members just expanded to 11 more metro areas.

advertisement
advertisement
The Unstaffed Store Expands to New Location

Exclusive: The Unstaffed Store Expands to New Location

The world's first unstaffed store has received attention worldwide and now another Swedish village seems to be in line for the so far unique concept.

advertisement
Swedish Unstaffed Store Sees Global Recognition

Swedish Unstaffed Store Sees Global Recognition

We have talked to the founder of Sweden's first unstaffed digital convenience store about his future e-commerce plans.

advertisement
advertisement
H&M Has Launched Online Shops for Seven New Markets

H&M Has Launched Online Shops for Seven New Markets

The Swedish fashion retailer is expanding its global online reach with dedicated websites in Croatia, Estonia, Latvia, Lithuania, Slovenia, Luxembourg and Ireland.

Insight: Does Size Really Matter?

Christoph Luetke Schelhowe, VP of Customer Experience at Zalando, reiterates the importance of the customer experience in the wake of Apple's newest mobile devices.

Now Everyone Can Record 60-Second Videos on Instagram

Not a minute too soon Instagram makes it possible for all users to post up to 60 seconds of video, not just advertisers.

advertisement
advertisement
EasySize Goes API and Puts Retailers in Control of Returns

EasySize Goes API and Puts Retailers in Control of Returns

Gulnaz Khusainova, CEO of EasySize, wants to make it easier for customers to shop online and easier for e-retailers to handle customers with a history of many returns.

About Ecomony.com

We are an independent news outlet reporting the latest news from the e-commerce economy.

Contact information

info@ecomony.com

Advertising inquiries

advertising@ecomony.com

Company details

EHANDEL SE AB
Organization number 556861-7517
EU Vat no SE556861751701