RE: [PHP] Protecting database passwords
| From: | Chris W. Parker | Date: | Wed, 30 Jun 2004 17:17:25 +0000 |
| Subject: | RE: [PHP] Protecting database passwords | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-189314@lists.php.net to get a copy of this message | ||
Red Wingate <mailto:redeye@erisx.de>
on Wednesday, June 30, 2004 9:33 AM said:
> Hashing ... but i guess he wants to protected the password
> needed to access the DB not a PW stored in the DB.
you probably understand this already but for those who don't i would
like to say:
right, but the point with hashing is that even if the hashes are
retrieved/stolen it will take time (possibly too long) for the password
itself to be recovered/discovered.
chris.