I'm new to cakephp and have set up the 'Simple Acl controlled
Application' successfully, but I was a bit concerned about the way
AuthComponent works went it stores passwords. I found that if the same
password is used for different logins then the value stored is the
same, which allows anyone with access.

I prefer the method used by the IBM tutorial at

http://www.ibm.com/developerworks/opensource/library/os-php-encrypt/

which uses crypt on two md5 hashes the userid and password
guarenteeing a unique value.

$cleanpw = crypt(md5($pw),md5($user));

Is there a way I can implement this method using the AuthComponent.

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected] For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en

Reply via email to