Re: Is MD5 still considered safe for storing application user passwords?
| From: | Richard Heyes | Date: | Wed, 31 Dec 2008 10:36:50 +0000 |
| Subject: | Re: Is MD5 still considered safe for storing application user passwords? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-285268@lists.php.net to get a copy of this message | ||
Hi,
> ...
You should also take into account how crucial your data is. If it's
nuclear launch codes I would say that you can't get enough security.
Howver if it's an admin system for Bobs local grocery store, then as
"Phpster" suggested, a salted hash may well be enough. For example,
you could use this:
<?php
$hash = md5($password . 'salt -
bhuyfuyftyfctujvikhgvbhjiftye5645rt68ty97tgifyvcu6yt7d');
?>
--
Richard Heyes
HTML5 Graphing for FF, Chrome, Opera and Safari:
http://www.rgraph.org (Updated December 20th)