View Single Post
Posts: 12 | Thanked: 25 times | Joined on Feb 2012
#73
Originally Posted by ColaCheater View Post
The idea of letting the user choose if an automaticly generated password should be used during the registration or if an own password should be used (make an md5 of the password and it shouldn't stand out during registration) is an option I would support.
...
Maybe an option of hiding or sending the MCC/MNC would be discussible but I would just use 0's as default.
DEVS: Password can be anything, still reverse and MD5 the password, so you don't need to check if it's an IMEI etc. (MAKE SURE YOU REVERSE THE PASSWORD SO ALL CLIENTS ARE COMPATIBLE)
With PHP, I'm doing this: md5(strrev($Password));

Also, you need to send the correct MCC/MNC for registration to work properly, or else you won't receive the code via SMS. (voice will still work though)

Regarding devs discussion, this is why I suggested Google+.
I've already discussed a few security issues with tgalal on there.

Again: My Google+ Profile, I'll create an open discussion with Developers ONLY.

Last edited by OzJD; 2012-02-23 at 03:24.