Re: Password encryption and password retrieval

On Tuesday 10 May 2005 16:05, Deep wrote: > Hi evryone, > > I want to implement a site where i would like to > encrypt the password of the users and store it into > mysql > database. My question is that , In case if the user > has forgotten the password how can he retrieve the > password(which is already encrypted and stored...the > user should be able to get the decrypted password). The user won't be able to retrieve it's password if you want your application to be secure. The best practice is to flush the password and let the user reactivate it's account by providing him a temporary password. > > Also which encryption method would you recommend. ie. > md5,crypt, etc.... > > Thanx, > ..Deeps.. > > ________________________________________________________________________ > Yahoo! India Matrimony: Find your life partner online > Go to: http://yahoo.shaadi.com/india-matrimony -- Cyberly yours, Petar Nedyalkov Devoted Orbitel Fan :-) PGP ID: 7AE45436 PGP Public Key: http://bu.orbitel.bg/pgp/bu.asc PGP Fingerprint: 7923 8D52 B145 02E8 6F63 8BDA 2D3F 7C0B 7AE4 5436

Attachment: [application/pgp-signature]