<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Semisecure Login</title>
	<atom:link href="http://jamesmallen.net/2007/09/16/semisecure-login/feed/" rel="self" type="application/rss+xml" />
	<link>http://jamesmallen.net/2007/09/16/semisecure-login/</link>
	<description>teacher and computer scientist</description>
	<lastBuildDate>Tue, 20 Apr 2010 18:18:14 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: nilleso</title>
		<link>http://jamesmallen.net/2007/09/16/semisecure-login/comment-page-1/#comment-20</link>
		<dc:creator>nilleso</dc:creator>
		<pubDate>Thu, 25 Dec 2008 05:13:11 +0000</pubDate>
		<guid isPermaLink="false">http://jamesmallen.net/2007/09/16/semisecure-login/#comment-20</guid>
		<description>First time trying this plugin but it seems to be broken in WP-2.7
Same as previous posts- when enabled getting invalid passwd
Doesn&#039;t seem to be browser dependent, tried on both Opera and Firefox.
Hope this can be fixed JMA - this looks like a valuable plugin.  thanks.</description>
		<content:encoded><![CDATA[<p>First time trying this plugin but it seems to be broken in WP-2.7<br />
Same as previous posts- when enabled getting invalid passwd<br />
Doesn&#8217;t seem to be browser dependent, tried on both Opera and Firefox.<br />
Hope this can be fixed JMA &#8211; this looks like a valuable plugin.  thanks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Victor-Y</title>
		<link>http://jamesmallen.net/2007/09/16/semisecure-login/comment-page-1/#comment-19</link>
		<dc:creator>Victor-Y</dc:creator>
		<pubDate>Thu, 01 May 2008 16:15:06 +0000</pubDate>
		<guid isPermaLink="false">http://jamesmallen.net/2007/09/16/semisecure-login/#comment-19</guid>
		<description>Adam Lee: Of course we are (at least I am) interested!</description>
		<content:encoded><![CDATA[<p>Adam Lee: Of course we are (at least I am) interested!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Adam Lee</title>
		<link>http://jamesmallen.net/2007/09/16/semisecure-login/comment-page-1/#comment-18</link>
		<dc:creator>Adam Lee</dc:creator>
		<pubDate>Sun, 27 Apr 2008 20:10:29 +0000</pubDate>
		<guid isPermaLink="false">http://jamesmallen.net/2007/09/16/semisecure-login/#comment-18</guid>
		<description>If anyone&#039;s interested, I&#039;ve fixed this plugin for WordPress 2.5. 

2.5 introduced a new hashing scheme and deprecated the hook this plugin was relying on. There&#039;s a new hook (check_password) that can be used for the same purpose. Hashing was trickier, but rather than try to recreate phpass() in Javascript, I used the &lt;a href=&quot;http://wordpress.org/extend/plugins/md5-password-hashes/&quot; rel=&quot;nofollow&quot;&gt;MD5 Password Hashes&lt;/a&gt; plugin for 2.5 to revert to the legacy behavior. My fix is dependent on that plugin. In any case, I think transmitting a password in plain text across a network is a far more serious security risk, so I&#039;m happy to trade down to MD5 in exchange for fixing that.

My fix restores the plugin&#039;s functionality for 2.5, including the very nice behavior of graceful degradation in the absence of client-side Javascript. Anyone interested?</description>
		<content:encoded><![CDATA[<p>If anyone&#8217;s interested, I&#8217;ve fixed this plugin for WordPress 2.5. </p>
<p>2.5 introduced a new hashing scheme and deprecated the hook this plugin was relying on. There&#8217;s a new hook (check_password) that can be used for the same purpose. Hashing was trickier, but rather than try to recreate phpass() in Javascript, I used the <a href="http://wordpress.org/extend/plugins/md5-password-hashes/" rel="nofollow">MD5 Password Hashes</a> plugin for 2.5 to revert to the legacy behavior. My fix is dependent on that plugin. In any case, I think transmitting a password in plain text across a network is a far more serious security risk, so I&#8217;m happy to trade down to MD5 in exchange for fixing that.</p>
<p>My fix restores the plugin&#8217;s functionality for 2.5, including the very nice behavior of graceful degradation in the absence of client-side Javascript. Anyone interested?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: vbarbero</title>
		<link>http://jamesmallen.net/2007/09/16/semisecure-login/comment-page-1/#comment-17</link>
		<dc:creator>vbarbero</dc:creator>
		<pubDate>Thu, 24 Apr 2008 15:49:22 +0000</pubDate>
		<guid isPermaLink="false">http://jamesmallen.net/2007/09/16/semisecure-login/#comment-17</guid>
		<description>I also have to login twice, as Viper007Bond and eb001 do. I use Wordpress 2.3.3 and Firefox. Any ideas to solve this? Thanks for such a useful plugin.</description>
		<content:encoded><![CDATA[<p>I also have to login twice, as Viper007Bond and eb001 do. I use WordPress 2.3.3 and Firefox. Any ideas to solve this? Thanks for such a useful plugin.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sibest</title>
		<link>http://jamesmallen.net/2007/09/16/semisecure-login/comment-page-1/#comment-16</link>
		<dc:creator>sibest</dc:creator>
		<pubDate>Wed, 23 Apr 2008 17:55:42 +0000</pubDate>
		<guid isPermaLink="false">http://jamesmallen.net/2007/09/16/semisecure-login/#comment-16</guid>
		<description>I have the same problem running Safari 3.1.1 and wordpress 2.5</description>
		<content:encoded><![CDATA[<p>I have the same problem running Safari 3.1.1 and wordpress 2.5</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: louis_nichols</title>
		<link>http://jamesmallen.net/2007/09/16/semisecure-login/comment-page-1/#comment-15</link>
		<dc:creator>louis_nichols</dc:creator>
		<pubDate>Sun, 20 Apr 2008 18:08:22 +0000</pubDate>
		<guid isPermaLink="false">http://jamesmallen.net/2007/09/16/semisecure-login/#comment-15</guid>
		<description>Hi!

I am having the exact same problem as the previous poster. I cannot log in using Firefox 2.0.0.14. Luckily, IE indeed works, so I was able to use it to deactivate the plugin.</description>
		<content:encoded><![CDATA[<p>Hi!</p>
<p>I am having the exact same problem as the previous poster. I cannot log in using Firefox 2.0.0.14. Luckily, IE indeed works, so I was able to use it to deactivate the plugin.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: fini</title>
		<link>http://jamesmallen.net/2007/09/16/semisecure-login/comment-page-1/#comment-14</link>
		<dc:creator>fini</dc:creator>
		<pubDate>Wed, 16 Apr 2008 21:37:18 +0000</pubDate>
		<guid isPermaLink="false">http://jamesmallen.net/2007/09/16/semisecure-login/#comment-14</guid>
		<description>Having a strange problem where, when using Firefox 3 beta 5, when I try to login to my blog it tells me the password is incorrect. It doesn&#039;t show any error message, except for saying &#039;incorrect password&#039;. I can still log in via internet explorer, but just not with firefox. I&#039;m using wordpress 2.5 on my blog. It doesn&#039;t happen when I login here to post a comment (looks like you&#039;re running 2.3.1) so seems to be a problem with firefox and 2.5...</description>
		<content:encoded><![CDATA[<p>Having a strange problem where, when using Firefox 3 beta 5, when I try to login to my blog it tells me the password is incorrect. It doesn&#8217;t show any error message, except for saying &#8216;incorrect password&#8217;. I can still log in via internet explorer, but just not with firefox. I&#8217;m using wordpress 2.5 on my blog. It doesn&#8217;t happen when I login here to post a comment (looks like you&#8217;re running 2.3.1) so seems to be a problem with firefox and 2.5&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Viper007Bond</title>
		<link>http://jamesmallen.net/2007/09/16/semisecure-login/comment-page-1/#comment-12</link>
		<dc:creator>Viper007Bond</dc:creator>
		<pubDate>Sat, 29 Mar 2008 06:56:01 +0000</pubDate>
		<guid isPermaLink="false">http://jamesmallen.net/2007/09/16/semisecure-login/#comment-12</guid>
		<description>Do you plan on updating this plugin for 2.5 or should I branch?</description>
		<content:encoded><![CDATA[<p>Do you plan on updating this plugin for 2.5 or should I branch?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Viper007Bond</title>
		<link>http://jamesmallen.net/2007/09/16/semisecure-login/comment-page-1/#comment-11</link>
		<dc:creator>Viper007Bond</dc:creator>
		<pubDate>Sun, 16 Mar 2008 07:38:38 +0000</pubDate>
		<guid isPermaLink="false">http://jamesmallen.net/2007/09/16/semisecure-login/#comment-11</guid>
		<description>I too have to login twice when I first view my login form (no session maybe?) and the &quot;remember me&quot; also doesn&#039;t work. I&#039;m using Firefox 2.0.0.12.

The double login even happens here on this blog.

The no remember me is due to the plugin&#039;s usage of wp_setcookie() without the remember me tag in place I think.</description>
		<content:encoded><![CDATA[<p>I too have to login twice when I first view my login form (no session maybe?) and the &#8220;remember me&#8221; also doesn&#8217;t work. I&#8217;m using Firefox 2.0.0.12.</p>
<p>The double login even happens here on this blog.</p>
<p>The no remember me is due to the plugin&#8217;s usage of wp_setcookie() without the remember me tag in place I think.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: eb001</title>
		<link>http://jamesmallen.net/2007/09/16/semisecure-login/comment-page-1/#comment-10</link>
		<dc:creator>eb001</dc:creator>
		<pubDate>Sat, 19 Jan 2008 03:36:56 +0000</pubDate>
		<guid isPermaLink="false">http://jamesmallen.net/2007/09/16/semisecure-login/#comment-10</guid>
		<description>I am also using the wp-password plugin, do you think there is a conflict?
It happens with every browser I&#039;ve tried (IE7, Firefox, Opera).</description>
		<content:encoded><![CDATA[<p>I am also using the wp-password plugin, do you think there is a conflict?<br />
It happens with every browser I&#8217;ve tried (IE7, Firefox, Opera).</p>
]]></content:encoded>
	</item>
</channel>
</rss>

