[dominik523]

Quote:

Originally Posted by rymax99 In the event someone gets their hands on your database, you don't exactly want all of your players plain text passwords readily available to attackers. Hashing doesn't prevent weak passwords from being brute forced, but it's enough to give a fair warning to players to change their password, and implement something script side for damage control. Another reason for hashing is to protect players from themselves. It's never advised to over utilize passwords, but it's all to common that people will use one password for everything. In the event that again, someone gets their hands on your database, you don't want an attacker to have access to plain text player passwords with the potential to access the email accounts, bank accounts, PayPal accounts, etc. of players. Not only would it be unfortunate for your players, it'd also be severely reputation tarnishing for your community. How you store passwords is irregardless, weather it be in a database or via a file saving system. You shouldn't store plain-text passwords. It's terrible practice and simply shouldn't be done.

Very nicely said. Thanks.
Like you said, it's irrelevant how you store passwords. You can take a password from a database or ini file. It will be the same and then you just insert it into some brute force or dictionary attack.