Welcome Guest, Not a member yet? Register   Sign In
clear text password to ?
#6

(04-21-2021, 01:28 AM)richb201 Wrote: Right now I am using a clear text password. I keep it in mySQL RDS on AWS in a table. I was planning on moving it to use fusionAuth to maintain passwords but I am out of time (and energy) to get that into the code (and fusionAuth is changing their pricing strategy). So I am back to using regular old CI3 code for the time being.

What is the best practice to secure that password and keep it in my mysql table? I have a way for a user to self register and also to reset their password already in the code. 

I use this script (https://www.openwall.com/phpass) to hash the password and store it in the database. At login, for example, the password sent is also hashed and compared to the passwords already stored.
Reply


Messages In This Thread
clear text password to ? - by richb201 - 04-21-2021, 01:28 AM
RE: clear text password to ? - by InsiteFX - 04-21-2021, 03:09 AM
RE: clear text password to ? - by richb201 - 04-21-2021, 07:22 AM
RE: clear text password to ? - by paliz - 04-21-2021, 04:03 AM
RE: clear text password to ? - by albertleao - 04-21-2021, 10:16 AM
RE: clear text password to ? - by kleber - 04-21-2021, 11:33 AM
RE: clear text password to ? - by Muzikant - 04-22-2021, 02:45 AM
RE: clear text password to ? - by InsiteFX - 04-22-2021, 04:51 AM
RE: clear text password to ? - by richb201 - 04-23-2021, 08:02 AM



Theme © iAndrew 2016 - Forum software by © MyBB