SHA1 Password returns as cleartext after DB query
- by Code Sherpa
Hi.
I have a SHA1 password and PasswordSalt in my aspnet_Membership table.
but, when I run a query from the server (a Sql Query), the reader reveals
that the pass has returned as its cleartext equivalent.
I am wondering if my web.config configuration is causing this?
<membership defaultProvider="CustomMembershipProvider"
userIsOnlineTimeWindow="20"
hashAlgorithmType="SHA1">
<providers>
<clear/>
<add name="CustomMembershipProvider"
type="Custom.Utility.CustomMembershipProvider"
connectionStringName="MembershipDB"
enablePasswordRetrieval="false"
enablePasswordReset="true"
requiresUniqueEmail="false"
requiresQuestionAndAnswer="false"
passwordStrengthRegularExpression=""
minRequiredPasswordLength="1"
minRequiredNonalphanumericCharacters="0"
passwordFormat="Hashed"
thanks in advance...