Doc #55215 [Opn]: md5 page should display a warning not to be used for passwords

Edit report at https://bugs.php.net/bug.php?id=55215&edit=1 ID: 55215 Updated by: joey@php.net Reported by: ss23 at ss23 dot geek dot nz Summary: md5 page should display a warning not to be used for passwords Status: Open Type: Documentation Problem Package: Documentation problem PHP Version: Irrelevant Block user comment: N Private report: N New Comment: It might also be nice to include a reference to a good explanation of why it's not, for example, Thomas Ptacek's article from a few years back. Previous Comments: ------------------------------------------------------------------------ [2011-07-15 12:44:40] ss23 at ss23 dot geek dot nz Description: ------------ Currently, far too many users think that md5() is suitable for storing passwords in their database. A warning that informs them its not, along with a link to an appropriate replacement like crypt() would help. This could be appropriate for pages likes sha1() and hash() too. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=55215&edit=1