Re: New Module
| From: | Rasmus Lerdorf | Date: | Tue, 05 Mar 2002 14:35:03 +0000 |
| Subject: | Re: New Module | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-80739@lists.php.net to get a copy of this message | ||
Why not just store them using crypt() or md5(). With one-way encoding
like that nobody can steal the passwords, not even you.
-Rasmus
On Tue, 5 Mar 2002, Brent R. Matzelle wrote:
> --- derick@php.net wrote:
> > Hey,
> >
> > why not simply use the mcrypt functions available in PHP?
>
> I will tell you why. Mcrypt is nearly useless for developers like
> myself who develop PHP applications for both *NIX and win32
> platforms. The mcrypt libraries are not distributed with the Windows
> binaries package and I have tried to build them myself only to find
> that you need Cygwin, which is an unacceptable dependency.
>
> I have been looking for months for a standard method to perform
> encryption with PHP and have only found php_blowfish
> (http://www.brisse.dk/linux/phpext/blowfish.htm) as a reasonable
> alternative that runs on both *NIX and win32 without many problems.
> Unfortunately this module is not distributed with PHP so I am nervous
> basing my software on it.
>
> I require two way encryption so that I can store passwords in a
> database to prevent unscrupulous database administrators from
> stealing them so it is extremely important to my business.
>
> If anyone has any input on this issue I would be delighted to hear
> it.
>
> Warm regards,
>
> Brent
>
> __________________________________________________
> Do You Yahoo!?
> Try FREE Yahoo! Mail - the world's greatest free email!
> http://mail.yahoo.com/
>
> --
> PHP Development Mailing List <http://www.php.net/>
> To unsubscribe, visit: http://www.php.net/unsub.php
>