|
FYI, when i store passwords in a cookie (for Remember me option), i double encrypt the passwords.
When users register a secret string is generated and is stored in DB. Users' password is double encrypted like
sha1($password,sha1($secretStr));
ANd this is the password i store in cookie. Even though people decrypt this password, they wont get the orginal password.
|