note 109080 added to function.crypt

Don't use MD5 crypt. Use something much slower, like the blowfish algorithm. Use a unique salt for each user, otherwise everyone with the same password will have the same crypt password. Common crypt passwords in a user base will obviously have been generated from common passwords. Therefore, a hacker with your password db will know which passwords to target with brute force attacks. Using the username and your domain in a salt would seem like the obvious way to get unique salts. ---- Server IP: 94.76.225.145 Probable Submitter: 139.184.30.133 (proxied: 139.184.135.189) ---- Manual Page -- http://www.php.net/manual/en/function.crypt.php Edit -- https://master.php.net/note/edit/109080 Del: integrated -- https://master.php.net/note/delete/109080/integrated Del: useless -- https://master.php.net/note/delete/109080/useless Del: bad code -- https://master.php.net/note/delete/109080/bad+code Del: spam -- https://master.php.net/note/delete/109080/spam Del: non-english -- https://master.php.net/note/delete/109080/non-english Del: in docs -- https://master.php.net/note/delete/109080/in+docs Del: other reasons-- https://master.php.net/note/delete/109080 Reject -- https://master.php.net/note/reject/109080 Search -- https://master.php.net/manage/user-notes.php