note 21613 deleted from function.md5 by nlopess
| From: | nlopess@php.net | Date: | Sun, 23 Apr 2006 14:19:21 +0000 |
| Subject: | note 21613 deleted from function.md5 by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-109163@lists.php.net to get a copy of this message | ||
Note Submitter: calin at ciao dot com
----
Hi everybody,
A way of partially securing your script so that a username/password combination is not visible
immediatelly is to use the one-way-only encryption of md5. For example, using HTTP Authentication
with PHP in this way:
if (
md5($PHP_AUTH_USER) !='21232f297a57a5a743894a0e4a801fc5' ||
md5($PHP_AUTH_PW) !='f70d11f8ad83b6f913115426098d2712'
) {
// force authentication
.....
exit;
}
could help you to protect the actual username and password from a person that can read the PHP
script.
Calin Uioreanu
php9 Weblog
http://www.php9.com