Tyler wrote in post #1065431:
> On Wednesday, June 20, 2012 8:20:13 AM UTC-7, ixti wrote:
>>
>>
> I understand the use case, but still doesn't make sense to store the
> password in plain text in the database.  It's actually even more
> pointless
> if all the users are admins... then they call all just see each others'
> passwords.  And it gives the illusion of security, when in actuality
> it's
> one params vulnerability away from giving all-encompassing access to any
> hacker that wants it


Dear Tyler

I don't want to store password in plain text in database. I just want to 
send an email to user that your login & password is this. Devise will 
store password in encrypt form in database.

-- 
Posted via http://www.ruby-forum.com/.

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en.

Reply via email to