[Infinity]

Quote:

Originally Posted by AmigaBlizzard The server-owner has access to all your account-data even when it's hashed. In a MySQL database, all your data is shown in a nice table with all info exposed like money, score, kills, deaths, whatever. They could even hash their own password and replace your password with their hashed password and sell your account to someone else. It's just a text-field in the database. Nothing is safe, even when it's hashed. Same rules for INI-files. They're just saved in plain text.

You're missing the point. If an owner decides to change some stats around, that's a dick move but nothing else. However, if he stored your password as plain text, he could also try using these passwords, for example, to login on their forum accounts here. Or their email. Or their PayPal/bank accounts. Or even worse, the database gets leaked and your password is out in the open.

@Mauzen:
That is exactly my point. As long as people get away with shit like that, nothing will change. Making it mandatory to secure the passwords, for example by law, would at least prevent shit like this.