note 61068 added to function.md5

Re: Andrew Nelless I believe that HMAC was designed for some reason. I believe the reason was that <?php hmac_md5($salt, $password); ?> is more secure then <?php md5($salt . $password); ?> Re: nathan at nathanbolender dot com The 'Salt & Pepper Encrypter' is no more secure then standard sha1() function. It only adds some random chars to the hash but does nothing with the password's hash. In particular, its enought to remove 32 or 40 characters (depending on the length of the whole hash - 74 or 82 characters acordingly) from the hash starting with the character at position stored at the end of hash (last two digits). We get a 42-char long string which first 40 characters are SHA-1 of the password. ---- Server IP: 81.223.254.85 Probable Submitter: 217.96.228.130 ---- Manual Page -- http://www.php.net/manual/en/function.md5.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+61068 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+61068&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+61068&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+61068&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+61068&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+61068&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+61068&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+61068&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+61068&report=yes Search -- http://master.php.net/manage/user-notes.php