note 110273 added to function.mcrypt-encrypt

It is always better to use a standard encryption cipher's rather than to "roll your own", firstly the standard cipher has been tested by world class crypto-analysis's where as unless your a world class crypto-analysis (and if you are why are you even thinking of rolling your own?!?) you won't have the skills needed to even test it (for example if you just XOR each character with a key, it may look secure (the text will be different) but if you count the number of times a character is repeated you see whatever the letter "E" encrypts to occurs more often then the encrypted "Z" (assuming English language plain text) Secondly, you may think that the hidden nature of your cipher makes it more secure, but the fact is that your cipher is likely *only* secure because it's secret, if someone what able to break-in to your site and steal your code (but not your key) they maybe able break you encrypted data, if someone broke in and found you where using Blowfish (for example) it wouldn't help them. ---- Server IP: 69.147.83.199 Probable Submitter: 82.31.221.48 ---- Manual Page -- http://www.php.net/manual/en/function.mcrypt-encrypt.php Edit -- https://master.php.net/note/edit/110273 Del: integrated -- https://master.php.net/note/delete/110273/integrated Del: useless -- https://master.php.net/note/delete/110273/useless Del: bad code -- https://master.php.net/note/delete/110273/bad+code Del: spam -- https://master.php.net/note/delete/110273/spam Del: non-english -- https://master.php.net/note/delete/110273/non-english Del: in docs -- https://master.php.net/note/delete/110273/in+docs Del: other reasons-- https://master.php.net/note/delete/110273 Reject -- https://master.php.net/note/reject/110273 Search -- https://master.php.net/manage/user-notes.php