Forum OpenACS Q&A: encrypted password

Collapse
Posted by David Kuczek on
Is there a way to encrypt a password in such a way that it doesn't only include the password itself but also some timeout?

I want to use it for the following scenario:

Somebody (person1) accesses a certain page (onepage.tcl) of one of my registered users (user1). person1 has to enter a password that he got from user1 to see this page. Whenever person1 refreshes this page after x-minutes he has to reenter the passwort in order to further see this page.

How do I encrypt and decrypt a password that looks like this: "password|timeout"

Would it be better to solve this with a cookie?

Thanks

Collapse
2: Re: encrypted password (response to 1)
Posted by Jonathan Ellis on
use a cookie.