RE: [PHP-DB] md5 question!
| From: | Matt Schroebel | Date: | Tue, 24 Jun 2003 13:52:28 +0000 |
| Subject: | RE: [PHP-DB] md5 question! | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-28853@lists.php.net to get a copy of this message | ||
> -----Original Message-----
> From: JeRRy [mailto:jusa_98@yahoo.com]
> Sent: Tuesday, June 24, 2003 9:50 AM
> To: bbonkosk@tampabay.rr.com; php-db@lists.php.net
> Subject: Re: [PHP-DB] md5 question!
>
> So with md5 I can
> retrieve the passwords back to the user if they lose
> them via email.
No, you can't. You'll need to generate a new password, md5 it, store it
& mark it expired, timestamp it so it's only valid for, say, 30 minutes,
email it, and finally, force the person to choose a new password when
they sign in.