grumm3t
Joined: 31 May 2003 Posts: 4
|
Posted: Wed Jun 18, 2003 9:54 pm Post subject: md5 hash the username password in database |
|
|
I don't see why b2 doesn't hash the passwords it puts into the MySQL database. Since many people use the same password for <strong>everything</strong> it would make sense to protect that password from evil admins.
I can understand that when you don't hash the password you can let users recover their password an 'easier' way, but if you just random the returned password things would be much more safer for the end user. |
|