Information about a user is stored on a mySQL database. This information can be modified through the website by an administrator or the individual student. The administrators can edit users through the User Management System, while the user modifies their profile with the profile editor. Both editors perform the same basic functions. However, only administrators can edit a user's permissions.
Passwords are stored on the database in an MD5-hash format, which is a non-reversible type of encryption. The downside of using MD5 is that if a user forgets their password, it can not be recovered and can only be reset by an administrator. |