Could not get info
Lavalair forgot password
Collapse
X
-
if your going to store plain text passwords atleast encrypt them with either aes or your own bi-directional algorithm. What you do is completely unsafe for your users (yes some users do use sensitive passwords on general chat sites believe it or not) and its quite disrespective of the users right to have sufficient security emplacements.
when inserting/updating use AES_ENCRYPT() and when you wanna send them their passes use AES_DECRYPT. Its not fool proof (no bi-directional hashing algorithm is) but its better than plain text if you dont wanna create your own algorithms
Comment
Comment