Re: update password cookie
| From: | John Kaspar | Date: | Thu, 18 Sep 2003 23:04:54 +0000 |
| Subject: | Re: update password cookie | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-163067@lists.php.net to get a copy of this message | ||
I'm just storing its hash. Then comparing it to the database hash. Is that bad? Is there a good write-up somewhere discussing authentication techniques that you could recommend?
Yahoo makes you reenter your password every time you reopen your browser. I'll check other sites though. Thanks for the advice.
On 9/18/2003 5:37 PM, Chris Shiflett wrote:
First, I hope you're not storing a password in a cookie, since it sounds like you are.