http://qs321.pair.com?node_id=296829


in reply to Re: Ecrypting passwords
in thread Ecrypting passwords

You don't have the plaintext password in your database, so you cannot implement a "remind me of my password" function.

An even better way is to simply reset the password, sending them the new password and an urgent request to change it ASAP. No worry about needing to keep a plaintext copy around... so you can implement the one way md5 checksum as tilly suggested.


cp
----
"Never be afraid to try something new. Remember, amateurs built the ark. Professionals built the Titanic."

Replies are listed 'Best First'.
Re: Re: Re: Ecrypting passwords
by tilly (Archbishop) on Oct 06, 2003 at 01:11 UTC
    That is only better if management agrees to that solution. Otherwise..well remember that part of what you are being paid for is to do things that you wouldn't choose to do if you weren't being paid..