What do you need to know about a “user” in a database table in order to “store” their data?
- Whatever the elements outlined in the table are, the incoming data must meet said elements. Correct data types, correct number of elements, etc. Depending on the data being stored, considerations of “uniqueness” must be factored in (only one user per email address, etc. )
How can we store a password in a secure way?
- Never as plain-text. Should the couple (login and password) be compromised, its game over right then and there if the password is stored as plain text.
- Some cases store the password in a database after it is encrypted via a reversible algorithm, though this is not suggested as it is “easy” to guess the logic of the encryption
- Hash encryption was popular for a while, however it can (and apparently was) be cracked by simple google searches of encrypted keys
- I think the simple answer to this question is “encrypting the password”, but I just finished reading about