Posted by Willem Bogaerts on 10/01/07 10:50

> In the example cited above, however, the password is stored unhashed
> back at the server (i.e., in the database) and it's this problem
> that's been tying me in knots this evening.

Ok, I see. Hashing is not everything. If you are afraid of storing
password in plaintext you can encrypt them. How you store things in a
database has little to do with the authentication process itself.

Best regards,
--
Willem Bogaerts

Application smith
Kratz B.V.
http://www.kratz.nl/

• Next in forum: Re: Save PHP variables to a text file
• Prev in forum: Re: Reading comp.lang.php with a newsreader
• Thread view: Re: Proposal for Lite Encryption for Login Form without SSL

[Reply to this message]