Re: Security Question with my password protected login script...

From: Date: Wed, 08 Dec 2004 20:50:51 +0000
Subject: Re: Security Question with my password protected login script...
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-203763@lists.php.net to get a copy of this message
Richard Lynch wrote:
Ian Gray wrote:
My question is, how secure is this? I have the password, username etc in a MYSQL database but I haven't encrypted it (don't know how)
The MySQL 'password' function at http://mysql.com would work. For something that is portable to non MySQL systems, you can use http://php.net/crypt
You should not use the MySQL PASSWORD() function within your own applications. MD5() is a good alternative as it's implemented in many programs including PHP and MySQL. Other suggestions were good, though. :) -- ---John Holmes... Amazon Wishlist: www.amazon.com/o/registry/3BEXC84AB3A5E/ php|architect: The Magazine for PHP Professionals – www.phparch.com

« previous php.general (#203763) next »