I am developing a website where the user need to register. After registration he can got some facility extra.
at the time of registration only the user will provide their email id and password.
Is it mandatory to encrypt the password in mysql.
If i am not doing so, then what can happen?
if it is mandatory then suggest me the way.
Well my friend, It is not mandatory but is safe approach to do so....... You can search php reference to find out the ways to do so. I had designed a website wherein I simply generated the md5 hash of the password supplied by the user and this way whenever I received the password entered by user at the time of login, I simply generated it's md5 hash and then, compare it with the hash already stored in the database. i guess it as simple as well as reliable method but I cannot say anything about applying it in the real world application as mine was only a test website that I created only for learning...
Hope it can help you.
its not necessary to encrypt password but notice that not to put password in cookies or links and also not to show the password even to the owner , use password type only.
but its better to encrypt to safe the user info.
This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)