Date parsed: 19/10/2007 08:02:04
Date: Fri, 19 Oct 2007 07:02:04 +0100
"dr" <softwareengineer98037@yahoo.com> wrote in message
news:u3i8vlgEIHA.5788@TK2MSFTNGP05.phx.gbl...
> what is the best way to store passwords and credit card information in SQL
> Server 2005?
>
If you store passwords yourself then they should be hashed but not encrypted
unless you require a password recovery feature. Password complexity and
expiration is equally important. Of course, authentication and password
management is built in to SQL Server so in many cases you shouldn't need to
store passwords yourself at all - use SQL Server or integrated security
instead.
For credit card data you can use the built-in encryption functions:
http://msdn2.microsoft.com/en-us/library/ms189586.aspx--
David Portas
