> All of the ways you discussed will work. Another way I've had some success with is to setup a user table with their access rights but no password. On your login screen you could add a logarithm type password (possibly based on the user name)that will then point to the user in the user table to gain their access rights. If this doesn't work for you I may have some other solutions.


Michael, I currently use appsec, user and userprofile tables. The user table stores a numericly transformed version of their password, which gets created [optionally] when the userid is created or when they log in for the first time. I then do a conversion back and forth to check when they log in. I'm not sure it's the best way, especially since I use a very simple algorithm.

I'd definitely be interested in hearing other suggestions though.

- Brian