RE: [PHP-DB] Password Reset
| From: | Miguel Guirao | Date: | Wed, 27 Feb 2008 15:13:01 +0000 |
| Subject: | RE: [PHP-DB] Password Reset | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-44676@lists.php.net to get a copy of this message | ||
As every body as said, it is not a best security practice to decrypt
passwords if the user forgets it. You should not provide of ways for hackers
to decrypt such passwords in the event of a security incident.
You better allow users to reset their passwords after providing evidence of
her/his authentication.
__________________
Miguel Guirao Aguilera, Linux+, ITIL
Sistemas de Información
Informática R8
Ext. 7540
--> -----Original Message-----
--> From: Nasreen Laghari [mailto:nasreen_laghari@yahoo.com]
--> Sent: Miércoles, 27 de Febrero de 2008 12:52 a.m.
--> To: php-db@lists.php.net
--> Subject: [PHP-DB] Password Reset
-->
--> Hi,
-->
--> I have encrypted password in database and I encrypted using MD5(). As
--> it is a one-way Hash so I cant get password back to original text !!!
-->
--> What encrypting technique I used to encrypt password so if user forget,
--> I can decrypt password and email it.
-->
-->
--> Regards
-->
--> Nasreen
-->
-->
-->
--> ________________________________________________________________________
--> ____________
--> Looking for last minute shopping deals?
--> Find them fast with Yahoo! Search.
--> http://tools.search.yahoo.com/newsearch/category.php?category=shopping