4 ms·
It is worth remembering that reset links should also be hashed. If the database is compromised the reset ID can be retrieved without needing access to the user
by 7952 12y ago
It is worth remembering that reset links should also be hashed. If the database is compromised the reset ID can be retrieved without needing access to the users email.