It's actually better if you don't decrypt the password at all. Instead, encrypt the password you got from the user exactly the same as the one in the database was and compare them.
Never having passwords (or other secure data) in memory is a Holy Grail that isn't always possible, but it's a good goal.
----
I wanted to explore how Perl's closures can be manipulated, and ended up creating an object system by accident.
-- Schemer
: () { :|:& };:
Note: All code is untested, unless otherwise stated
In reply to Re: Re: Re: Class::DBI - performing action on column before it is used or saved
by hardburn
in thread Class::DBI - performing action on column before it is used or saved
by duct_tape
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |