Results 1 to 2 of 2

Thread: Question about Authorization

  1. #1
    Banned
    Join Date
    Jan 2012
    Gender
    Posts
    8
    Thanks
    2
    Thanked 3 Times in 3 Posts


    Downloads
    13
    Uploads
    0
    Mentioned
    10 Post(s)
    Time Online
    11 h 56 m
    Avg. Time Online
    N/A
    Rep Power
    0

    Question about Authorization

    How come when you login to the forum your password is hashed, but when you go to auth it, you don't have the password hashed?

    Isn't that a huge security risk?

  2. #2
    Saiyan Race





    Infamous Joe's Avatar
    Join Date
    Dec 2011
    Gender
    Location
    Hyperbolic Time Chamber
    Age
    26
    Posts
    9,754
    Thanks
    2,780
    Thanked 16,239 Times in 4,238 Posts


    Downloads
    23
    Uploads
    36
    Mentioned
    2985 Post(s)
    Time Online
    293 d 17 h 16 m
    Avg. Time Online
    3 h 44 m
    Rep Power
    10
    Gamer IDs

    Gamertag: Infam0us Joe Steam ID: infamousjoe
    The authentication uses the same procedure as a regular login, so yes it is hashed (but unlike the normal one where it is done client side, this one is sent to my server where a PHP script does it).

    Thanks for trying to lookout though.

  3. The Following User Says Thank You to Infamous Joe For This Useful Post:

    Duck4Cover (06-16-2013)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •