Wondering if that could be possible, to encrypt the password so can´t be readed that easy in settings.ini
I don´t trust in all my guild members and kinda dangerous if someone with knowledge about how roster and uniuploader works has the password.
Or any way to use different passwords for roster config and roster upload, that would be the best option.
But if too much trouble to do that, a good step will be encrypting that password field. So I can provide my guild members of a pre-configured .ini for safety.

Thanks and more thanks for wowroster

dont put the update password in the ini you wish to distribute:

http://www.wowroster.net/wiki/index.php ... stribution

Thanks for your answer, matt
Ok, nice script you did. Saved me time building a setup factory installer

But still with the same problem, still can read the clean roster password from the ini.
You say me not to put the password in the ini, but then I need to tell to any member to put "mypassword" to upload their char data. And is the same problem, even worse.
Is not a a complaint, my friend. I´m really grateful with all your works here, just trying to sugest

You don't need put the password into the settings.ini, because uploading character data is possible even without the password!

The password is needed at upload noly to update the guild information and character<->guild assignment out of the GuildProfiler data (which is also saved in the CharacterProfiler.lua).

And a basic encryption wouldn't be save, cause of open-source. Everybody would be able to read a static key or the location of the local generated encryption-key.
Only a public privat key establishment between server and uploader could be realized and would be nearly save, but only if you have a completly encrypted communication between UU and Roster (e.g. via SSL). If the transmission remains unencrypted, everybody would be able to get the password with a simple network package sniffer like it's included in windows.

To cut a long story short, to much work for an unnecessary feature ;-)

So far...
Jellow

O.o my bad.
Didn´t know password wasn´t necessary.
In fact, dont know why my head repeat: "password needed for upload"
Prety sure I read it somewhere and sticked with that.
Mi mistake, sorry for the topic :p
cyas and thanks for the explanation