Just a reference.

If you ever have to decrypt a password in the future (special requirements /
out of your control / absolutely required) then you should use something
like this and build it into auth.

http://en.wikipedia.org/wiki/Blowfish_%28cipher%29

On 4 February 2011 12:00, andy_the ultimate baker <
anandghaywankar...@gmail.com> wrote:

> ya its write
> the same i was thinking because security point of view its not good to
> show password to user
>
> On Feb 4, 4:46 pm, Matt Murphy <mattyh...@gmail.com> wrote:
> > There are other better solutions :)  But my hope is to discourage another
> > from doing far worse.
> >
> > MM
> >
> > On Fri, Feb 4, 2011 at 6:35 AM, AD7six <andydawso...@gmail.com> wrote:
> >
> > > On Feb 4, 12:21 pm, Matt Murphy <mattyh...@gmail.com> wrote:
> > > > It is never necessary to decrypt a password -- both from a technical
> > > > standpoint and from a security standpoint.  If you need to check an
> > > entered
> > > > password vs the stored has, you hash the entered password and compare
> > > with
> > > > the stored hash.  If your user forgets theirs, simply generate a new
> one,
> > > > email it to them
> >
> > > FWIW that's a hideous practice. don't mail passwords.
> >
> > > --
> > > Our newest site for the community: CakePHP Video Tutorials
> > >http://tv.cakephp.org
> > > Check out the new CakePHP Questions sitehttp://ask.cakephp.organd help
> > > others with their CakePHP related questions.
> >
> > > To unsubscribe from this group, send email to
> > > cake-php+unsubscr...@googlegroups.com<cake-php%2bunsubscr...@googlegroups.com>
> <cake-php%2bunsubscr...@googlegroups.com<cake-php%252bunsubscr...@googlegroups.com>>For
> more options, visit this group at
> > >http://groups.google.com/group/cake-php
>
> --
> Our newest site for the community: CakePHP Video Tutorials
> http://tv.cakephp.org
> Check out the new CakePHP Questions site http://ask.cakephp.org and help
> others with their CakePHP related questions.
>
>
> To unsubscribe from this group, send email to
> cake-php+unsubscr...@googlegroups.com<cake-php%2bunsubscr...@googlegroups.com>For
>  more options, visit this group at
> http://groups.google.com/group/cake-php
>



-- 
Kind Regards
 Stephen @ NinjaCoderMonkey

 www.ninjacodermonkey.co.uk

-- 
Our newest site for the community: CakePHP Video Tutorials 
http://tv.cakephp.org 
Check out the new CakePHP Questions site http://ask.cakephp.org and help others 
with their CakePHP related questions.


To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php

Reply via email to