note 101319 added to function.crypt

From: Date: Thu, 09 Dec 2010 16:18:54 +0000
Subject: note 101319 added to function.crypt
Groups: php.notes 
Request: Send a blank email to php-notes+get-174753@lists.php.net to get a copy of this message
@fmaz008: It's not a problem with the actual function. If you are not supplying a salt (the second parameter), the function will use Standard DES. There lies the actual problem. What you are proving, is actually mentioned in the beginning of the description of this function. If you want to hash passwords properly with this function, supply a salt like '$2a$08$<insert 22 random characters here>$'. This will make the function use Blowfish-based bcrypt, which is very strong for password hashing. Just make sure you have PHP 5.3. ---- Server IP: 69.147.83.197 Probable Submitter: 79.134.123.122 ---- Manual Page -- http://www.php.net/manual/en/function.crypt.php Edit -- https://master.php.net/note/edit/101319 Del: integrated -- https://master.php.net/note/delete/101319/integrated Del: useless -- https://master.php.net/note/delete/101319/useless Del: bad code -- https://master.php.net/note/delete/101319/bad+code Del: spam -- https://master.php.net/note/delete/101319/spam Del: non-english -- https://master.php.net/note/delete/101319/non-english Del: in docs -- https://master.php.net/note/delete/101319/in+docs Del: other reasons-- https://master.php.net/note/delete/101319 Reject -- https://master.php.net/note/reject/101319 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#174753) next »