Re: [Phplib-users] preexisting auth integration

[Richard A. <rh...@ju...>]

At 11:38 AM +0200 23/8/01, giancarlo pinerolo wrote:

>This is interesting because it poses another side question: what should
>be if it was a two-phase action?

The applications I have written that use a two-stage password have a
"verified" column in the database. Initially that contains a 0 and once
the user has been verified it changes to a 1.

If emails to the user start bouncing, this can be changed back to a 0
or perhaps to a 3.


>be the emailaddr, is an optional choice. One could have already his
>logins that are not the email addresses, or that are.

The big advantage of using the email address as the login is that users
rarely forget their email address, and you have assurance that if they
forget their password you have an email address to send a new one to.

 ...R.