On Dec 20, 2011, at 4:02 PM, MB Software Solutions, LLC wrote:
> As you might have seen from a previous thread, I was looking at using
> the checksum via SYS(2007) or Craig Boyd's CRC() function (from his
> vfpencryption71.fll) to store the person's password. I've never liked
> saving the actual password in the database.
You should never store passwords. Instead, you should store a hash of
the password. When the user logs in, you hash the supplied password and compare
it to the stored hash. If they match, the password was valid.
-- Ed Leafe
_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message:
http://leafe.com/archives/byMID/profox/[email protected]
** All postings, unless explicitly stated otherwise, are the opinions of the
author, and do not constitute legal or medical advice. This statement is added
to the messages for those lawyers who are too stupid to see the obvious.
