>    Philip> Just randomly generate a string.
>
> Or use the username or email itself as the salt. So you won't have to
> store the salt. This is secure enough.

But what happens if they change their username or email address?

-- 
Chris Hope
The Electric Toolbox Ltd

Email: [EMAIL PROTECTED]
Web: www.electrictoolbox.com
Phone: +64 9 522 9531
Mobile: +64 21 866 529

--~--~---------~--~----~------------~-------~--~----~
NZ PHP Users Group: http://groups.google.com/group/nzphpug
To post, send email to [email protected]
To unsubscribe, send email to
[EMAIL PROTECTED]
-~----------~----~----~----~------~----~------~--~---

Reply via email to