http://www.silverstripe.org/archive/rss http://www.silverstripe.org/archive/show/4416?start=0#post4429 <p>That's true.. I fixed this already in the GSoC branch a while ago.. I think this branch will go into the 2.1 version.</p><br><br>Posted to: Member to rememeber <a href="http://www.silverstripe.org/archive/show/4416?start=0#post4429">Show Thread</a> | <a href="http://www.silverstripe.org/archive/reply/4416?start=0#post4429">Post Reply</a> Mon, 27 Aug 2007 02:00:54 +1200 Markus http://www.silverstripe.org/archive/show/4416?start=0#post4429 http://www.silverstripe.org/archive/show/4416#post4416 <p>Hi, <br />when the Member is remembered in the browser, the cookie is set in Member:: autoLogin(). This cookie is encoded email and password. </p><p>The cookies are unsafe in general, but a little better option is to put some random hash into the cookie, because user's tends to make the same password for more accounts. The cookie can be a pair email:hash, and then the hash need not to be necessary unique.</p><br><br>Posted to: Member to rememeber <a href="http://www.silverstripe.org/archive/show/4416#post4416">Show Thread</a> | <a href="http://www.silverstripe.org/archive/show/4416#post4416">Post Reply</a> Sun, 26 Aug 2007 10:02:36 +1200 xmedeko http://www.silverstripe.org/archive/show/4416#post4416