I agree. I do my own user authentication and don't use DB level authentication for an application. The only authentication is for the application itself to login to the database. Tom Veldhouse veldy at veldy.net ----- Original Message ----- From: "Bob Tanner" <tanner at real-time.com> To: <tclug-list at mn-linux.org> Sent: Thursday, August 02, 2001 4:10 PM Subject: Re: [TCLUG] mysql password('') > Quoting Thomas T. Veldhouse (veldy at veldy.net): > > I don't believe so. I believe that it simply stores the MD5 hash -- which > > is a one-way hashing function. You have to create a new password if you > > don't remember it. > > I normally sort the crypt(3) version of passwords in the database. I believe php > has this ability and I wrote a Java version. > > I like to make the database tier of my application just persistent storage. I > keep all the logic in the business tier. > > -- > Bob Tanner <tanner at real-time.com> | Phone : (952)943-8700 > http://www.mn-linux.org | Fax : (952)943-8500 > Key fingerprint = 6C E9 51 4F D5 3E 4C 66 62 A9 10 E5 35 85 39 D9 > > _______________________________________________ > tclug-list mailing list > tclug-list at mn-linux.org > https://mailman.mn-linux.org/mailman/listinfo/tclug-list >