Re: Password Authentication
| From: | David Otton | Date: | Sat, 22 Mar 2003 17:18:49 +0000 |
| Subject: | Re: Password Authentication | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-140693@lists.php.net to get a copy of this message | ||
On Sat, 22 Mar 2003 09:31:14 -0500, you wrote:
>First off, there are multiple encryption methods out there -- PHP
>crypt() and the mcrypt functions, and MySQL encrypt(), for encryption;
>and the md5 etc. functions for hashing. Is there any information on
>best practices here, particularly in using PHP's encryption vs MySQL's?
I would suggest using the MySQL ENCRYPT(), SHA1(), or MD5() functions,
simply because if you write a new front-end in a different language,
there's no danger of losing native support for the hashing algorithm.