17.03.2016, 10:08
The server-owner has access to all your account-data even when it's hashed.
In a MySQL database, all your data is shown in a nice table with all info exposed like money, score, kills, deaths, whatever.
They could even hash their own password and replace your password with their hashed password and sell your account to someone else.
It's just a text-field in the database.
Nothing is safe, even when it's hashed.
Same rules for INI-files.
They're just saved in plain text.
In a MySQL database, all your data is shown in a nice table with all info exposed like money, score, kills, deaths, whatever.
They could even hash their own password and replace your password with their hashed password and sell your account to someone else.
It's just a text-field in the database.
Nothing is safe, even when it's hashed.
Same rules for INI-files.
They're just saved in plain text.