We do this by sending an email with a verification link, then when the user clicks on that link, we "activate" their account (an active field in the database) and display their password as image files instead of as text. You've probably seen this before at PayPal and others that require you to type in the text from the images you see on screen to verify. This works well and is a relatively secure way of confirming addresses and issuing passwords without having to ever send a text copy of the password via email. I'm sure there are several other ways to do this though. An example of the image display (we use a function called RandString() which can be found at cflib.org): <cfset i=1> <cfset pwrd=RandString("APLHANUM",RandRange(8,12))> <cfloop condition="i LTE Len(pwrd)"> <img src="" width="30" height="30" alt=""> <cfset i=i+1> </cfloop> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to