Re: Secure way to handle pw on session.

You should never store a user's password. Instaed immediatly do an SHA1 hash of the password and compare that to the hashed password in your database. It doesn't make any sense to store passwords in clear text. Even if they found the hash they wouldn't be able to reverse it (hashes are once way since they are like a sum, the inverse is impossible to compute). - Dan