Account

The user will also be able to edit account information. Currently only the user's e-mail address and password may be changed. When the user changes the e-mail address then an e-mail will be sent to both the old e-mail address, and the new email address as confirmation. The new e-mail address will replace the email field in the applicant record for this user.

When the password is changed the new password goes through MD5 hashing and the hash replaces the current passwordHash field in the applicant record for this user. A new cookie is also created with the OUAC number and new password hash so that the user remains logged in. If the cookie were not added then the old password hash would remain in the cookie and would be compared to the new password hash in the database on the next page. The user would then have to log in again.