crypt() should raise error without 2nd parameter
| From: | Yasuo Ohgaki | Date: | Wed, 07 Aug 2013 10:18:15 +0000 |
| Subject: | crypt() should raise error without 2nd parameter | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-68396@lists.php.net to get a copy of this message | ||
Hi all,
A user requested that crypt() should raise error without 2nd(slat)
parameter.
https://bugs.php.net/bug.php?id=55036
crypt() without salt generates extremely weak password hash. In addition to
this,
PHP 5.5 has password_hash()
This change should be applied from 5.5, IMHO.
Any comments?
--
Yasuo Ohgaki
yohgaki@ohgaki.net