I have a class where I am trying to create a user with minimal information by calling the Membership.CreateUser. The user does get created in the database, there is a password salt generated, but the password is not hashed. It is stored in plain text, and with the salt, the account cannot be logged into...
Posted to
Security
(Forum)
by
davenel
on
03-14-2009, 12:00 AM
Filed under: password, password hashing, hashed passwords, .Net Membership Class, "Security"