RE: [PHP] Help with authentication 'design'
| From: | Peter Hicks | Date: | Tue, 18 Feb 2003 14:42:54 +0000 |
| Subject: | RE: [PHP] Help with authentication 'design' | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-136012@lists.php.net to get a copy of this message | ||
Nick,
md5 is a hashing function, not an encryption function. You need anti-replay
if you want the password transfer to be secure
On Tue, 18 Feb 2003, Clarkson, Nick wrote:
> Would this pass both variables in clear text back to the server ? If so
> would it be better to do this;
>
> [cut]
>
> Would this then pass both variables after being hashed with md5 ? Am I
> barking up the wrong tree ? Or just plain barking ;oD