| the hashed password that is. When someone tries to log in, they pass a username and password to the program. The program in turn tries to create a User object, beginning by hashing the supplied password and comparing that to the stored password. If successful - that is, if a correct username/password has been supplied - the User object queries the database and fills out the remainder of its information (first name, last name, title, etc.) The question is: Should my user object have User.Password as a property (alongside User.FirstName, User.Title, etc.)? |
