3 ms·
Nice idea! I noticed though that you're including the user's password in the confirmation email. This isn't recommended for security reasons (as it's easy to i
by itistoday 16y ago
Nice idea!
I noticed though that you're including the user's password in the confirmation email. This isn't recommended for security reasons (as it's easy to intercept, and users often use the same password for multiple services). Also, I hope you're storing the salted hash of the password on your server (as opposed to the actual password).
- ritonlajoie 16y agothanks! i use drupal,the security is quitengood.in the db,a hash is stored,the only clear pass is in the mail.i ll try to change that,you are right.