RE: Soliciting best approach for storing passwords . . .

2002-06-30 Thread César Aracena
Barn. I asked the same question couple of weeks ago and all the answers I got pointed to one way encryption. Actually, I had the same need that you, but understood that it was better to reset the password when a Forgot password was made, send it to the user and ask them to change the password at

RE: Soliciting best approach for storing passwords . . .

2002-06-30 Thread Peter Lovatt
--- Sunmaia www.sunmaia.net [EMAIL PROTECTED] tel. 0121-242-1473 --- -Original Message- From: César Aracena [mailto:[EMAIL PROTECTED]] Sent: 30 June 2002 21:42 To: 'databarn'; 'MySQL' Subject: RE: Soliciting best approach

RE: Soliciting best approach for storing passwords . . .

2002-06-30 Thread databarn
Thanks, César, But this is not an option that is negotiable for me. The client mandate is very clear, and the reason behind it has a strong business case from their standpoint. I'm not about to get them to change their minds . . . they and I have been over this way too many times already.

RE: Soliciting best approach for storing passwords . . .

2002-06-30 Thread databarn
Thanks, Peter, Yeah, I had looked at ENCODE()/DECODE() and ABS_ENCRYPT()/ABS_DECRYPT() as possible tools, as well as some inherent PHP functionality. My real question is more about database design than about the mechanics of encryption. But I do appreciate the feedback. Make a good day .