我有md5加密密码，当用户使用“忘记密码"时如何将密码提供给用户? [英] I Have md5 encrypted password, how to give the password to user when he uses "Forgot password"?

问题描述

我有md5格式的密码数据库条目，但是当用户使用忘记密码"时，如何给他/她提供所需的密码?

I have database entry for password in md5 format, but when user uses the "Forgot password" then how can i give him/her the desired password?

推荐答案

您不能通过MD5哈希来执行此操作；您也不应该能够.密码恢复应该很棘手.

You can't do that from an MD5 hash; nor should you be able to. Password recovery ought to be intractable.

通常的过程是将密码重置令牌(URL)发送到其电子邮件地址，以便用户可以选择新密码.

The usual process is to send a password-reset token (URL) to their email address so that the user can choose a new password.

这篇关于我有md5加密密码，当用户使用“忘记密码"时如何将密码提供给用户?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！