16-09-2015, 02:06 PMDP_PN Wrote: The weakness of the password storage method is irrelevant to be honest with you. If you have the hash, that you took from the database, you also have the loginkey. With the loginkey, you can instantly start a session for any user, without using a password.
Not if you force everyone to logout in the event of a breach.
![[Image: ZtDsXXv.png]](https://i.imgur.com/ZtDsXXv.png)