Have Geek Brain

Best User Registration and Login Strategy for a Web Application

I am writing a web application (servlet / JSP on tomcat) and wanted to learn best practices / experiences for user management (logins and registration)

I like more

database design security issues (how to save a password on the server and how to send a password from a wedge to https) common mistakes

etc.

Thanks --Jatin

0


a source to share


1 answer


When the user creates their password, you want to create a hash of that password (with some salt) and store the hash.

You will not be able to get a password to send to the user. You should only be able to validate user input against the stored hash.



If the user has forgotten their password, you can provide them with a link to reset their password, but it is bad practice to send the user their password.

+2


a source






More articles:


All Articles