Re: Record old passwords ?

[Mark Goodge]

On 19/01/2010 09:14, Tompkins Neil wrote:

> I think I will go with the four additional column
> approach as I proposed (in the current table) - since this need is a PCI
> compliancy security requirement.

Do you have a reference for that? Storing past passwords as additional 
fields like that is inflexible and generally bad database design. I'd be 
somewhat surprised if PCI compliance really did require it.

Mark
-- 
http://mark.goodge.co.uk - blog
htp://www.good-stuff.co.uk - stuff