Answer the question
In order to leave comments, you need to log in
How to protect such functionality?
For the general development, I decided to make a simple system of users, a couple of questions are of interest.
When registering, the user cannot enter his password, the site offers a ready-made one. This is done to speed up the registration process. With a high degree of probability, the user will not immediately write it down and will not be able to remember it. Therefore, I want to be able to see the current password in the account settings.
In what form should the password be transmitted and stored? And also, what methods of protection should be introduced?
Answer the question
In order to leave comments, you need to log in
Kill it. Give the ability to do anything, including without a password. The agreement will write everything off. You're not a bank, are you?
In general, sites like life hacks are annoying (that is, they do not bear potential costs for them), where it is necessary to leave a phone number and a password of at least 8 characters, but the register is different, and special characters ...
Give the opportunity to make a password of 123 and that's it.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question