note 98653 deleted from function.md5 by danbrown
| From: | danbrown@php.net | Date: | Tue, 29 Jun 2010 12:32:13 +0000 |
| Subject: | note 98653 deleted from function.md5 by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-170545@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
Please, please, please, please don't use the example by "Anonymous, 08-Jun-2010
08:36". It is extremely ill constructed. The first (32 - password length) bytes will always be
identical, thus making this incredibly prone to collisions. The value constructed from SALT_TWO will
never be used at all. This is just wrong in so many ways.
Salt the password BEFORE doing the hash. Use a different random salt for each password, and store it
with the password.