Karl Brose wrote:
Other than that, one could probably encrypt/decrypt passwords when needed, particularly when
they come out of a database, most of these solutions are probably more or less hacks.

Surely you're better off just storing the SHA hash of the password and then simply hashing the request in the same manner. Then all you need to do is check if the hashes match.


That way you don't need to store any passwords.

--
Cheers,

Matt Riddell
_______________________________________________

http://www.sineapps.com/news.php (Daily Asterisk News - html)
http://www.sineapps.com/rssfeed.php (Daily Asterisk News - rss)
_______________________________________________
Asterisk-Users mailing list
[EMAIL PROTECTED]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to