The module works very good, we use it a lot.

But it is possible to export the users with there password.  This is a real securety issue for my client!  You actualy NEVER need to do that, if you are not planning of hacking other peoples system.
It has ablolutely no added value to the export module.  No one needs to know the passwords of others.

Do you agree on this? or do you have other ideas on this issue?

 

Hi. Well we actually have run into several occasions when helping clients move between sites or moving a site away from DNN to another platform when this feature has not only become useful but absolutely necessary for their implementation (moving over 13,000 users and having them all change their passwords is a big deal!). These modules should only be avaliable and used by host users though and with caution/care. Who is handling the exports in your implementation? Are the exports one time or on a regular basis? After you use it you could uninstall it unless you are needing this information exported on a regular basis.

-Chad

Hi. I can see now where this is usefull. After thinking it through... anybody who can get as far as looking at our "admin only" user export module, has also the knwoledge for doing this without the module. We have 3 hosts on our website and no admins, so the risk exists but is limited. Your idea of removing the module after use was the solution we already using. Thanks for time!
Olivier