"member information" is always complicated, but I always split the identifying information into another table and use the salt key to link the 2 together. Thus, it is not so easy to “capture” usernames and passwords, etc. And you can always use SALT as a session variable rather than username / password / userId or something else.
Usually I only store the identifier, salt, and join date in 1 table. As I said, I'm trying to “hide” the rest so that they cannot be “tied up / stolen”.
Hope helps
source
share