At 11:43 PM +0000 1/14/09, Ashley Sheridan wrote:

 >
Surely that's a good thing then? Security through obscurity and all
that...

Ash

Ash:

Certainly it's a good thing -- until the client asks for another password.

At this point, I have four logon and password combinations to use. I can tell the client if they use one of those, then they can login. However if they want their own, then I have no idea of what the algorithm was/is and thus no way of generating a new combination for them.

You see, the problem here is not that I can't set up an authorization scheme -- I can do that easily enough. The problem is that I don't know how the one currently in place on my client's server works in generating passwords. If I knew that, then I could generate the password myself.

Cheers,

tedd

--
-------
http://sperling.com  http://ancientstones.com  http://earthstones.com

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to