note 101319 added to function.crypt
| From: | sforsman at osu1 dot php dot net | Date: | Thu, 09 Dec 2010 16:18:54 +0000 |
| Subject: | note 101319 added to function.crypt | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-174753@lists.php.net to get a copy of this message | ||
@fmaz008:
It's not a problem with the actual function. If you are not supplying a salt (the second
parameter), the function will use Standard DES. There lies the actual problem. What you are proving,
is actually mentioned in the beginning of the description of this function.
If you want to hash passwords properly with this function, supply a salt like
'$2a$08$<insert 22 random characters here>$'. This will make the function use
Blowfish-based bcrypt, which is very strong for password hashing. Just make sure you have PHP 5.3.
----
Server IP: 69.147.83.197
Probable Submitter: 79.134.123.122
----
Manual Page -- http://www.php.net/manual/en/function.crypt.php
Edit -- https://master.php.net/note/edit/101319
Del: integrated -- https://master.php.net/note/delete/101319/integrated
Del: useless -- https://master.php.net/note/delete/101319/useless
Del: bad code -- https://master.php.net/note/delete/101319/bad+code
Del: spam -- https://master.php.net/note/delete/101319/spam
Del: non-english -- https://master.php.net/note/delete/101319/non-english
Del: in docs -- https://master.php.net/note/delete/101319/in+docs
Del: other reasons-- https://master.php.net/note/delete/101319
Reject -- https://master.php.net/note/reject/101319
Search -- https://master.php.net/manage/user-notes.php