Keep only the account name and password digests

It occurred to me the other day that both the account name and the account password should be recorded in the database as MD5 digests. There is really no reason to keep a clear text version of either of these datum.

No comments: