Re: Users and Security

From: Horvath Andras <raas_at_balu.sch.bme.hu>
Date: 2000/09/20
Message-ID: <8qab8l$e7k$2@goliat.eik.bme.hu>#1/1

another (more general) solution can be to change the user's password from within the application so that in will be an 'encrypted' version of his original password. next time he logs in, the app tries both the typed-in and the encrypted passwords to log the user in. You won't have to store a password (for a role) in the app then but an algorythm to convert between clear->encrypted passws, with no need for any algorythm to do the reverse.

raas

-- 
 "With enough free time, effort, and an input string that looks like the
  winning entry in last year's obfuscated-C contest, you can turn
  someone's simple mistake into a nationally syndicated news story."

Received on Wed Sep 20 2000 - 00:00:00 CDT