Just a thought. If you have dragged the whole user record back that includes 
the hashed password and is then included in an array as part of a save function 
even if it hasn't been changed, will this beforeSave function not rehash the 
already hashed password?

Jeremy Burns
Class Outfit

http://www.classoutfit.com

On 27 Jul 2011, at 03:18, Meroe Kush wrote:

> Disregard my last post please.....
>  
> As soon as I hit send I found this:
>  
> Hashing passwords
> AuthComponent no longer automatically hashes every password it can find. This 
> was removed because it made a number of common tasks like validation 
> difficult. You should never store plain text passwords, and before saving a 
> user record you should always hash the password. You can use the static 
> AuthComponent::password() to hash passwords before saving them. This will use 
> the configured hashing strategy for your application.
> After validating the password, you can hash a password in the beforeSave 
> callback of your model:
> <?php
> class User extends AppModel {
>     function beforeSave($options = array()) {
>         $this->data['User']['password'] = 
> AuthComponent::password($this->data['User']['password']);
>         return true;
>     }
> }
>  
> 
> -- 
> Our newest site for the community: CakePHP Video Tutorials 
> http://tv.cakephp.org 
> Check out the new CakePHP Questions site http://ask.cakephp.org and help 
> others with their CakePHP related questions.
>  
>  
> To unsubscribe from this group, send email to
> [email protected] For more options, visit this group at 
> http://groups.google.com/group/cake-php

-- 
Our newest site for the community: CakePHP Video Tutorials 
http://tv.cakephp.org 
Check out the new CakePHP Questions site http://ask.cakephp.org and help others 
with their CakePHP related questions.


To unsubscribe from this group, send email to
[email protected] For more options, visit this group at 
http://groups.google.com/group/cake-php

Reply via email to