schmunk42/yii-user — pull request #2 by acerix (2012-04-21 21:54:31+00:00)
Title: crypt() support for password encryption

I added crypt() as the default for password encryption, and updated the db passwords to the format expected by crypt(). ( Using crypt() is more secure, since it uses a random salt, and the hash algo is decided by PHP therefore updated automatically)

Also, I think it is a potential security risk to have a default 'activkey', so I have defaulted that to empty instead.

thanks for writing a great module! A+++, would fork again