Re: Encrypting passwords from page to page -mcrypt question
| From: | Ciprian Constantinescu | Date: | Fri, 16 Jul 2004 11:38:26 +0000 |
| Subject: | Re: Encrypting passwords from page to page -mcrypt question | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-190700@lists.php.net to get a copy of this message | ||
Why don't you try POST instead of GET? This way the password will not be
visible in the URL.
"Scott Taylor" <scotttaylor@bigfoot.com> wrote in message
news:40F70407.7020301@bigfoot.com...
>
> I would like to go from page to page, submitting the password through a
> GET query string. Of course I wouldn't want to do this unencrypted. So
> is mcrypt the best option?
>
> When submitting the data, would I also need to sumit the IV as well as
> the encrypted data? Or am I completely off base with this one? Should
> I also base64_encode() this data when passing it?
>
> Scott Taylor