[PHP] Re: Secure way to handle pw on session.

[Dan]

You should never store a user's password.  Instaed immediatly do an SHA1 
hash of the password and compare that to the hashed password in your 
database.  It doesn't make any sense to store passwords in clear text.  Even 
if they found the hash they wouldn't be able to reverse it (hashes are once 
way since they are like a sum, the inverse is impossible to compute).

- Dan 


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php