As has already been mentioned you can use MD5 for turning your passwords into unrecoverable strings inside your database.
If you do this you read the password from the user, apply the MD5 function and compare the result with that in your database, this is fast, easy and very standard.
However it suffers from two "drawbacks":
- Your users are still sending their passwords in plaintext, unless you're using a secure server and HTTPS.
- You don't have the plaintext password in your database, so you cannot implement a "remind me of my password" function.
The first point may not be a big deal to you, I guess it depends upon the nature of your site.
The second point might be an issue if you have lots of forgetful users. In practise if you include a function for "resetting" your users passwords and mailing them a new one that will probably suffice.
-
Are you posting in the right place? Check out Where do I post X? to know for sure.
-
Posts may use any of the Perl Monks Approved HTML tags. Currently these include the following:
<code> <a> <b> <big>
<blockquote> <br /> <dd>
<dl> <dt> <em> <font>
<h1> <h2> <h3> <h4>
<h5> <h6> <hr /> <i>
<li> <nbsp> <ol> <p>
<small> <strike> <strong>
<sub> <sup> <table>
<td> <th> <tr> <tt>
<u> <ul>
-
Snippets of code should be wrapped in
<code> tags not
<pre> tags. In fact, <pre>
tags should generally be avoided. If they must
be used, extreme care should be
taken to ensure that their contents do not
have long lines (<70 chars), in order to prevent
horizontal scrolling (and possible janitor
intervention).
-
Want more info? How to link
or How to display code and escape characters
are good places to start.
|
