in reply to Re: Escape the special characters while substitution
in thread Escape the special characters while substitution

The fact that the passwords are being stored at all, assuming that this is to authenticate a user, is fishy. If at all possible, do not store this type of information.

If you (the OP, not ikegami) are just using this to authenticate someone coming into your system, create a "difficult" hash of the password, and store that. When the user tries to authenticate the next time, run the same hash function, and compare the results to your stored results.

--MidLifeXis

The tomes, scrolls etc are dusty because they reside in a dusty old house, not because they're unused. --hangon in this post

  • Comment on Re^2: Escape the special characters while substitution