note 100752 deleted from function.md5 by danbrown
| From: | danbrown@php.net | Date: | Thu, 04 Nov 2010 14:58:06 +0000 |
| Subject: | note 100752 deleted from function.md5 by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-173750@lists.php.net to get a copy of this message | ||
Note Submitter: jfernandes at tecnica dot cc
----
@Anonymous 08-Jun-2010 08:36
just a small addition to your function:
I think you should MD5 your password just before returning it
because, let's say, 2 different users enter 2 passwords like for example
password1
password2
then when we substring it may return exactly the same hash.
So imo it's best to add this line:
$new_pword .= md5($new_pword);
after:
if( defined('SALT_TWO') ):
$new_pword = md5(SALT_TWO);
endif;
Best Regards