Re: Passwords logging

From: Patrick Dughi (dughi@imaxx.net)
Date: 02/02/00


>         If ever there's a security issue about logging password... to
> check double account or whatever...

        When it comes down to it, there's no reason to log passwords.  An
imp would be the one to decide, and since all the flexibility that logging
passwords gives already comes from the ability to set passwords, there's
no reason to do so.

        If a user forgets his password, you just reset it.

                        *shrugs*

        If you're paranoid, have each player enter an email address when
they create their character, and if they say they forgot their password,
send the newly generated password to that email. Bam, 10 second fix.

                                        PjD


     +------------------------------------------------------------+
     | Ensure that you have read the CircleMUD Mailing List FAQ:  |
     |  http://qsilver.queensu.ca/~fletchra/Circle/list-faq.html  |
     +------------------------------------------------------------+



This archive was generated by hypermail 2b30 : 04/10/01 PDT