Hi,

I just had a look at ezcMvcAuthenticationFilter from 2009.1alpha1.

There is one thing I dislike. You can't use other hash methods for 
hashing the password than md5 except overwriting at least 2 methods.

Wouldn't it be better to provode a method i.e.:

/**
  * Returns the hashed version of the clear text password
  *
  * @param string $password
  */
protected function hashPassword( $password )
{
     return md5( $clearPassword );
}

And use $this->hashPassword( $password ) instead of md5( $password )
so that you only need to overwrite this method?

I save my password with a salt and use sha1 for hash.



best regards

Sascha

-- 
Components mailing list
Components@lists.ez.no
http://lists.ez.no/mailman/listinfo/components

Reply via email to