> But how do i, as administrator, select the users password and decrypt it?
> This is supposed to be used on a "forgotten password" page.

This is a hash function -- you _don't_ recover the password.  Period.

On a recovery page, allow the user to set a new password (they didn't
remember the old one anyway, right?).  Recovering the old one is a
security hazard.
-- 
Michael T. Babcock
(Getting really close to including SQL Database in all my sigs to
kill that !@#$ spam filter)


---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to