Re: How can MD5 HAsh be passed to db as pwd? was a Re: [PHP] Securing PHP code
| From: | Duncan Hill | Date: | Thu, 26 Jun 2003 15:25:34 +0000 |
| Subject: | Re: How can MD5 HAsh be passed to db as pwd? was a Re: [PHP] Securing PHP code | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-152993@lists.php.net to get a copy of this message | ||
On Thursday 26 June 2003 16:22, Jeff Harris wrote:
> http://www.php.net/md5
>
> Set the column type of password to be a char(32). Then, pass the password
> through md5 to mysql to store it. To verify it, pass the password through
> md5 then compare it to what's in the database.
Or, to avoid problems with MD5 weaknesses, use SHA1 :)