Just a reference. If you ever have to decrypt a password in the future (special requirements / out of your control / absolutely required) then you should use something like this and build it into auth.
http://en.wikipedia.org/wiki/Blowfish_%28cipher%29 On 4 February 2011 12:00, andy_the ultimate baker < [email protected]> wrote: > ya its write > the same i was thinking because security point of view its not good to > show password to user > > On Feb 4, 4:46 pm, Matt Murphy <[email protected]> wrote: > > There are other better solutions :) But my hope is to discourage another > > from doing far worse. > > > > MM > > > > On Fri, Feb 4, 2011 at 6:35 AM, AD7six <[email protected]> wrote: > > > > > On Feb 4, 12:21 pm, Matt Murphy <[email protected]> wrote: > > > > It is never necessary to decrypt a password -- both from a technical > > > > standpoint and from a security standpoint. If you need to check an > > > entered > > > > password vs the stored has, you hash the entered password and compare > > > with > > > > the stored hash. If your user forgets theirs, simply generate a new > one, > > > > email it to them > > > > > FWIW that's a hideous practice. don't mail passwords. > > > > > -- > > > Our newest site for the community: CakePHP Video Tutorials > > >http://tv.cakephp.org > > > Check out the new CakePHP Questions sitehttp://ask.cakephp.organd help > > > others with their CakePHP related questions. > > > > > To unsubscribe from this group, send email to > > > [email protected]<cake-php%[email protected]> > <cake-php%[email protected]<cake-php%[email protected]>>For > more options, visit this group at > > >http://groups.google.com/group/cake-php > > -- > Our newest site for the community: CakePHP Video Tutorials > http://tv.cakephp.org > Check out the new CakePHP Questions site http://ask.cakephp.org and help > others with their CakePHP related questions. > > > To unsubscribe from this group, send email to > [email protected]<cake-php%[email protected]>For > more options, visit this group at > http://groups.google.com/group/cake-php > -- Kind Regards Stephen @ NinjaCoderMonkey www.ninjacodermonkey.co.uk -- Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions. To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/cake-php
