Security module

I have few questions to those who perhaps mastered Security Module in SC.

  1. Where the database connection information is stored (dB name, username, password, host etc) ?
  2. If the security is turned OFF in SC, then the user is created (or the password of existing user is updated) - if MD5 encryption still in effect or not ?

ARTHUR

The database information is stored in _lib\conf\prod.config.php of your project dir and yes it is encrypted.

As there is no difference in the generated code, yes the MD5 routine is still used. Only the security table is ignored.