Re: [PHP] General security Question (Databases)

2001-03-20 Thread Michael Kimsal
Hi Ben. I see your point, but it's harder to deal with in those cases. I'd reckon most people on this list are using some type of shared hosting system anyway, where they CAN'T do that. Creating extra users in most databases I've used is a bit of a pain, and trying to tie in your application's

[PHP] General security Question (Databases)

2001-03-20 Thread ben . 2 . edwards
The examples of holding passwords in databases (i.e. mysql) tend to encrypt the password. Although this seems sensible (if not necessary) it douse mean that if a user forgets there password the normal solution is to generate a new random password and email it to them. Then I realised that this f