Re: Protecting database passwords

From: Date: Wed, 30 Jun 2004 17:29:16 +0000
Subject: Re: Protecting database passwords
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-189316@lists.php.net to get a copy of this message
even for the guy who wrote the source. it's allmost impossible to restore the data as the only option is a brute-force attempt. Chris W. Parker wrote:
Red Wingate <mailto:redeye@erisx.de> 
    on Wednesday, June 30, 2004 9:33 AM said:
Hashing ... but i guess he wants to protected the password needed to access the DB not a PW stored in the DB.
you probably understand this already but for those who don't i would like to say: right, but the point with hashing is that even if the hashes are retrieved/stolen it will take time (possibly too long) for the password itself to be recovered/discovered. chris.


« previous php.general (#189316) next »