Great. That was an update from John at Myecom. It appears to be a big pain in the ahem.
Actually, it's not so the WEBMASTERS can't see them, lol, it's so that if the sites get hacked they can't access your pw and use it for other sites, paypal, etc, (if you are dumb enough to use the same pw for paypal...).
This is what John said to us:
" * A few small changes, nothing major except new accounts will have the ' " & ? and space removed from them if a person uses them becuase it causes some problems. For example try to put a ? or & in the referral url and they will never get their credit for referrals.
* A NOTE EXPLAINING ENCRYPTION. Try to get paypal to send you your password, they can't its encrypted all they can do is send you a NEW password. If it could be decrypted then it would defeat the purpose of encrypting it in the first place. The people that are having a problem loging in is not because of the encryption direcly, Its because passwords now must be entered in the CoRrEcT case, where before it was not case sensitive.
* The encryption was not added to protect the members account on your site. Lets face it. if a hacker gets his hands on your data he can do what ever he wants to it and not even need to use the passwords. It is to prevent the hacker from ever knowing the real password so that if your member uses that password on PayPal or egold or other services like that, the hacker will not be able to log into those services and steel their money. This did happen by the way. And some of the sites hacked also used ftp passwords that were real close to the passwords they used on PTR sites so once the hacker got his hand on one database it was just a matter of him trying username and passwords on the ftp access to other site owners that used those same passwords on PTR sites. Then he got access to even more members and more passwords.
* The referral ID is no longer saved in a cookie, It is tracked using php sessions only and of course the confirmation url as always
* All passwords are saved in the database encrypted. This will prevent hackers from ever knowing the passwords of your members (if your server ever gets hacked). which is good for all those insane members that use their paypal password for all the PTR accounts
* The accounting table does not use Mysql Auto-Increment as some people after restoring their database mysql decided to set the next number to use as the last possible, causing them no to be able to add more transactions to the database
* Still reports of a bug in the use of both cash and points signup and referral bonuses. This release addresses this problem"
Hope that helps.