Hi Doug,

> The way I read it, Ivan's changes allow a user to only SEE
> his password. He
> didn't include anything which helps a user change his password.

Ivan's solution also allows changes to the user's password in the
database. The user cannot only see it, but also change it.

But of course you are right, without IB's password hashing algorithm,
the changes wouldn't make sense. So anybody using Ivan's solution must
ensure to have some logic for password hashing in the application which
changes the passwords.


Cheers,

Christian