Idea for register page

Quote:

Originally Posted by [MXD]Takeshi you need generate a password ??? exist different method, but an easy way is: Code: $psw = md5(substr(str_shuffle("0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"), 0, 10)); get a random string, then use SMTP to send by email.

Quote:

Originally Posted by SnickQ I mentioned that generating a password is a better way to protect the server from unfair admins. :)

Quote:

Originally Posted by [MXD]Takeshi this yes, it would be nice, as I explained using the encrypted password instead of the Pw... But the problem is... after many years, "many" script release for register and other, stoled and released website, in all this the password is a input... so, tell me why someone will be choose to use an "encrypt" password when i can have psw "free" ? im a developer and can made everything in website, but when someone not like it? and want normal register ? there are different pros and cons in my opinion

Quote:

Originally Posted by SnickQ Yes everything is depend what kind admin is. But in this case i was mean to protect server aganst admins from other servers who can use users password to harm ours server. I was see that few times.

Quote:

Originally Posted by perlisson do you find it difficult to create a registration page generating cryptography? if you think this is difficult, you can forget it, because it is simpler than you think, for example I give it a well-used way today, after the insert command coming from a '' prepare '' use this: $sql = $pdo->prepare("INSERT INTO Users_Master (Pw) VALUES (:md5) "); $sql->bindValue(":md5",md5($password)); $sql->execute(); get a simple pdo registry that a former epvp user posted, or do yours, after creating password encryption, you have to get your PS_lOGIN to recognize and convert the md5 hash and make it a normal character, and make you join the game, has a post here, which explains better about '' pslogin recognize the hash '', but it's not difficult at all, you just have to search and run back. I particularly do not think it safe to use a hash md5, but a password_hash would be better -- my English is bad

$sql = $pdo->prepare("INSERT INTO Users_Master (Pw) VALUES (:md5) ");

$sql->bindValue(":md5",md5($password));
$sql->execute();

write like it, is right but wrong....

$sql = $pdo->prepare("INSERT INTO Users_Master (Pw) VALUES (?)");
$sql->bindValue(1, md5($psw), PDO::PARAM_STR); 
-- you define the type, and instead of bindValue you can use bindParam
$sql->bindParam(1, md5($psw), PDO::PARAM_STR, 10); -- where 10 is the length of value

$sql->execute();

Quote:

Originally Posted by SnickQ @[Only registered and activated users can see links. Click Here To Register...] You did not read my post at all. xD ok to explain in another way. Playes using same logins and password in every servers. So for example: We have 2 (or more) server 1: Shaiya Earth - and here i have Login: Shaiya Password: Shaiya123 okey? Then i go to another server let me call it: 2: Shaiya Moon - and here i have Login: Shaiya Password: Shaiya123. So now for some reason admin from 1 (Server Earth) going to serer 2 Moon) and he use My login and pw (Shaiya, Shaiya123 is same in both server) and now admin from Shaiya Earth have access for account in Shaiya Moon. So i just give you idea to not allow users to make own password but insted create it for them to make sure that admins from others server not use this data aganst you. :D