17.03.2016, 12:38
Why even bother keeping them in both forms? The hashed version doesn't make any sense then, does it? There are plenty of alternative ways for a player to reset their password without you having to see what it is. Your intentions are probably good but you are pretty naive to think that everyone's intentions are good.