Quote:
Originally Posted by Gunderak
Thanks for your feedback.
Before I release it on the server I will DEFINITELY make the passwords encrypted  |
Not encrypted, hashed. You should never be able to retrieve passwords from a database and restore them to their original form (as an interesting sidenote, Graal's support center database was leaked and resulted in 4,126 usernames, emails, and plain-text passwords being released because their passwords were recoverable (or stored as unsalted MD5 or something, not sure)).