Bill Cosby is my Father
Posts: 4
32 credits Members referred : 0
« on: Sep 09, 2006, 04:06:08 am »
Can anyone explain to me how to change the script so when a user forgets his password the actual password is emailed instead of a link to change the password?
Thanks Mike
Moderator Community Supporter?
Jedai Sword Master
Gender:
Posts: 6691
34714 credits Members referred : 374
Can anyone explain to me how to change the script so when a user forgets his password the actual password is emailed instead of a link to change the password?
Thanks Mike
I think there is no secure member system where this is possible, why?
because the password needs to stored encrypted in the database, there is now way to un-encrypt the password, that why you can't mail it.
But whats wrong with the current method?
Kill the googlebot
Posts: 6
44 credits Members referred : 0
« Reply #2 on: Sep 11, 2006, 07:57:00 am »
It's true, the current way is how it should be done. The passwords are stored via a one-way hash, so, you change it instead of retrieving the original as in theory the original is "hidden" now.
Trackback URI for this entry : http://www.webdigity.com/trackback.php?topic=4012