Hey, we have forums!

Author Topic: Please stop the forum from mailing the password to new users  (Read 7510 times)

0 Members and 1 Guest are viewing this topic.

Offline kolAflash

  • Mini Bit
  • **
  • Posts: 2
    • View Profile
Currently the forum mails the password after creating an account. That's an absolute bad security practice! Just mail the activation link, that's enough.

By the way:
Do you save the password as salted hashes? Please don't save the original password! This describes why (not just for PHP).
http://php.net/manual/en/faq.passwords.php

Offline Kateweb

  • Mini Bit
  • **
  • Posts: 3
    • View Profile
Re: Please stop the forum from mailing the password to new users
« Reply #1 on: January 12, 2014, 07:20:35 pm »
I was pissed when I saw my password in plain text and had to create a new one.