Tuesday, December 20, 2011

Store Plaintext Password on login

Hi! Have you ever faced the problem of storing password on wrong login
attemps?
I know that on registration i can add a "confirmation_password" field
and store that password on the db in clear, but i don't need that. I
need to boost up security on login brutefroce attack to (hopefully)
recognize the kind of bruteforce (dictionary or row bruteforce
combination). As you know, i have no way to know that data since Auth
component gives me only hashed password and i need it clear!
Thank you for the help!!

--
Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org
Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions.


To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php

No comments: