Hi to all, i have developed my own module, but now im seeking for a secure form to store the information on my SQL 2005. I want to know if is possible to obtain the user password in plain text at login moment to hash the information on the database. The schema im looking is something like this:

1- The users login to the site

2- The system capture the password of the user in the memory

3- The system use the passwor to unhash the information at the database

4-When the user logoff or the session time out the information becomes hashed again.

Its possible? anyone has any other recommendation? Any idea is accepted if is secure ;)

Thanks

Sebastian

Feels like you are asking for trouble going down that sort of path.
I can think of any number of reasons why the REHASHing event may never occur
 - leaving you will a partly hashed / partly unhashed database.

You would be better off adding any hash/unhash code at a Data Application level. In DNN that could be done using DAL+.

That way you only handle the unhash as required ... when a record is requested.
And the hashing on a record save.

You would also need to create a custom user profile manager
to catch any changes to the user password
 - BEFORE they happen ... to unhash the data and they rehash it again.

Westa