Re: crypt() should raise error without 2nd parameter
| From: | Leigh | Date: | Wed, 07 Aug 2013 11:00:00 +0000 |
| Subject: | Re: crypt() should raise error without 2nd parameter | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-68397@lists.php.net to get a copy of this message | ||
On 7 August 2013 11:18, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> A user requested that crypt() should raise error without 2nd(slat)
> parameter.
>
> https://bugs.php.net/bug.php?id=55036
>
> crypt() without salt generates extremely weak password hash.
>
The docs seem to indicate that some implementations generate their own
random salt if one is not supplied? It doesn't seem right to raise a
warning if it doesn't apply to _all_ cases.