> It is never necessary to decrypt a password -- both from a technical
> standpoint and from a security standpoint. If you need to check an entered
> password vs the stored has, you hash the entered password and compare with
> the stored hash. If your user forgets theirs, simply generate a new one,
> email it to them
FWIW that's a hideous practice. don't mail passwords.
--
Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org
Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions.
To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php
No comments:
Post a Comment