Doc #55215 [Opn->Asn]: md5 page should display a warning not to be used for passwords

Edit report at https://bugs.php.net/bug.php?id=55215&edit=1 ID: 55215 Updated by: frozenfire@php.net Reported by: ss23 at ss23 dot geek dot nz Summary: md5 page should display a warning not to be used for passwords -Status: Open +Status: Assigned Type: Documentation Problem Package: Documentation problem PHP Version: Irrelevant -Assigned To: +Assigned To: frozenfire Block user comment: N Private report: N Previous Comments: ------------------------------------------------------------------------ [2011-07-15 12:51:01] joey@php.net It might also be nice to include a reference to a good explanation of why it's not, for example, Thomas Ptacek's article from a few years back. ------------------------------------------------------------------------ [2011-07-15 12:44:40] ss23 at ss23 dot geek dot nz Description: ------------ Currently, far too many users think that md5() is suitable for storing passwords in their database. A warning that informs them its not, along with a link to an appropriate replacement like crypt() would help. This could be appropriate for pages likes sha1() and hash() too. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=55215&edit=1