Quote:
Written by CoffeeMugDude
I put in place a random, "pronounceable password generator" I found on PHPBuilder. When a user "loses" their password, a new, random password is generated and emailed to them, and the MD5 encrypted version is saved into the database.
|
After reading through your first sentences this was my first worry....And you nailed it....this sounds awesome!
Although I find it very helpful at times when dealing with the users to have their password visible for certain situations. Like testing their account as them etc.