note 90851 deleted from function.hash by thiago
| From: | thiago@php.net | Date: | Wed, 13 May 2009 00:25:30 +0000 |
| Subject: | note 90851 deleted from function.hash by thiago | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-154529@lists.php.net to get a copy of this message | ||
Note Submitter: naekur
----
For password storage I would recommend using http://www.openwall.com/phpass/
It is a PHP implementation of bcrypt (http://bcrypt.sourceforge.net/) which is used to store
password for most *nix operating systems. (if its good enough for freebsd its good enough for you).
You will need to install the Suhosin patch (http://www.hardened-php.net/suhosin/index.html) as well
if you are using a version of PHP before 5.3.0 so bcrypt can use blowfish, if not it falls back to
MD5.
good luck!