rosscoD Posted April 25, 2010 Share Posted April 25, 2010 I'm extending my ajax login system for my site and whmcs integration. I'm including a way to reset your password the same way WHMCS does it but was wondering if it's important how the temporary key is created? I have already created most of the login system and it's working quite well... I am now just at the point of generating the new key but wondered if it matters how it's actually created. Should it be created using some part of the current hashed password held on an account or is it ok to generate a random string to be passed to the database? 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.