Please for god sake hash our passwords!!! 
With a strong salt/pepper, please!
It is really brazenly to see my password unhashed in the url for the confirmation (in the email), so everyone could get this password!
With a strong salt/pepper, please!
It is really brazenly to see my password unhashed in the url for the confirmation (in the email), so everyone could get this password!
I would suggest using Bcrypt as it's a very secure hash algorithm!
Regards,
Houssem.