I agree.  I do my own user authentication and don't use DB level
authentication for an application.  The only authentication is for the
application itself to login to the database.

Tom Veldhouse
veldy at veldy.net

----- Original Message -----
From: "Bob Tanner" <tanner at real-time.com>
To: <tclug-list at mn-linux.org>
Sent: Thursday, August 02, 2001 4:10 PM
Subject: Re: [TCLUG] mysql password('')


> Quoting Thomas T. Veldhouse (veldy at veldy.net):
> > I don't believe so.  I believe that it simply stores the MD5 hash --
which
> > is a one-way hashing function.  You have to create a new password if you
> > don't remember it.
>
> I normally sort the crypt(3) version of passwords in the database. I
believe php
> has this ability and I wrote a Java version.
>
> I like to make the database tier of my application just persistent
storage. I
> keep all the logic in the business tier.
>
> --
> Bob Tanner <tanner at real-time.com>       | Phone : (952)943-8700
> http://www.mn-linux.org                 | Fax   : (952)943-8500
> Key fingerprint =  6C E9 51 4F D5 3E 4C 66 62 A9 10 E5 35 85 39 D9
>
> _______________________________________________
> tclug-list mailing list
> tclug-list at mn-linux.org
> https://mailman.mn-linux.org/mailman/listinfo/tclug-list
>