|
Posted by Michael Fesser on 02/12/07 17:23
..oO(Amar)
>I want to insert my password into the mysql database by encrypting it
>so that I can also retrieve the password. Before I was using sha1()
>for encrypting password,but it is an one way method.
That's how it's supposed to be. Passwords should never be stored in a
decryptable way. If a script can decrypt them, an attacker can do that
as well.
Storing just a (salted) password hash is fine. If a user forgets his
password then he should get a new one.
Micha
Navigation:
[Reply to this message]
|