quasiman Posted April 27, 2006 Share Posted April 27, 2006 I'm starting out to make a system for people to save login/password information to a database (mysql) - basically a place to check all their pop3 email accounts from one login on my system.I'll need the passwords in plain text so they can be passed correctly to the server for login details(IE: not md5), is it safe to post passwords through a hidden field form? Quote Link to comment Share on other sites More sharing options...
kenrbnsn Posted April 28, 2006 Share Posted April 28, 2006 No. People will be able to see them by doing a show source. Using sessions are a little more secure, but since sessions are stored in files, they can be read.We'll need a little more information before we can advise you how to do this securely.Ken Quote Link to comment Share on other sites More sharing options...
quasiman Posted April 28, 2006 Author Share Posted April 28, 2006 [!--quoteo(post=369403:date=Apr 27 2006, 07:06 PM:name=kenrbnsn)--][div class=\'quotetop\']QUOTE(kenrbnsn @ Apr 27 2006, 07:06 PM) [snapback]369403[/snapback][/div][div class=\'quotemain\'][!--quotec--]No. People will be able to see them by doing a show source. Using sessions are a little more secure, but since sessions are stored in files, they can be read.We'll need a little more information before we can advise you how to do this securely.Ken[/quote]The users would need to first create an account and login, then they would only see their own details for each page. Using foreign keys to have seperate tables for my users and their pop3 login details. If a person isn't logged in, they wouldn't see anything about it in the source.Sorry I wasn't more clear... Quote Link to comment Share on other sites More sharing options...
quasiman Posted April 28, 2006 Author Share Posted April 28, 2006 *bump* Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.