Crystal Web suffers ADSL security breach

[MickeyD]

Necro Warning.



@DJ... how can you justify allowing admins and developers to have access to a list of real clear text customer passwords? Passwords should always be hashed (preferably multiple times) and never stored in clear text.

Do not do your testing in a production environment with production data, build a separate test environment with separate test databases.

Totally different scenario this time around.