Time for action – another Xataface security measure

Before we finish this chapter, there is one additional security measure that should be introduced in order to ensure that your Xataface application is safe. We earlier created our admin account in the dataface__users table in the database and entered a simple password. We should, of course, use a more complex password and certainly recommend doing so on a live production website. It is also recommended that passwords be stored in an encrypted format in the database to prevent them from being viewed by anyone who has access to the database, legitimate or otherwise. Moodle encrypts passwords prior to inserting them into the database and Xataface can do so as well. Setup password encryption for your Xataface users table by following these steps:

1. Navigate to your Xataface application at yourmoodlesite/cims and log in using your admin account information: CIMS-Admin and 1234. Make sure you log in as admin before moving on to the next step. If...