RE: [PHP] Trying to e-mail password
| From: | John W. Holmes | Date: | Wed, 13 Nov 2002 06:07:06 +0000 |
| Subject: | RE: [PHP] Trying to e-mail password | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-124161@lists.php.net to get a copy of this message | ||
> Using ENCODE and DECODE with protected 'secret code' help you to
improve
> your security and user's security. And you don't lost anything doing
this,
> on the contrary, it is a good marketing arguments, like as your system
> (site) is more safe than other and user could fell in.
And where do you plan on storing this 'secret code' that your dynamic
PHP script have to have access to in order to add users and send
forgotten email messages??
If you have something to protect, then you should have your own server
or get it with someone you can trust. If the hacker can see your mysql
data, they can see the source of your PHP scripts, and nothing is hidden
anymore.
---John Holmes...