• I don’t know if it’s my version or if any version paid/unpaid, so I’m just going to throw this out there and give a heads up to the people using this plugin.

    The passwords saved on the database are not encryped, they’re just stored in a plain text format, like “pass123”. Which can lead to serious trouble if someone steals your database information.

    If you use this for user registrations, for each custom field that you are using on your form, you’ll get one extra entry on the database (“crf_submissions” table to be more precise), this means that if you’re using 9 custom profile fields on a form, you’re getting a total of 20 rows for each user registered ( 9 custom and 11 which come default ), if you have a lot of users registrations daily, this may lead to some serious space eater on your database, which I think that it could have been avoided.

  • The topic ‘Totally not safe.. and really bad optimization’ is closed to new replies.