|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Re: Built in Package for encryption and decryption process. [message #355294 is a reply to message #355287] |
Thu, 23 October 2008 06:31  |
JRowbottom
Messages: 5933
Registered: June 2006
Location: Sunny North Yorkshire, ho...
|
Senior Member |
|
|
i need to encryption and the password.
1)encryption password store into database.
2)while login decryption password.
No no no no no no no.
No.
Don't do that - Encryption is, by definition, eversible. If yuo store the information in an encrypted form, it means that users passwords can be decrypted and stolen.
Whatyou want to do is this:
1) Hash the password and store this in the db
2) When the user tries to log in, take the password they enter and hash that.
3) Compare the two hashes
It's the way Oracle do it, and you canbet they've spent more time thinking about this that you or I have.
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
