note 24598 deleted from function.mhash by peehaa

From: Date: Thu, 23 Apr 2015 09:43:39 +0000
Subject: note 24598 deleted from function.mhash by peehaa
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-202351@lists.php.net to get a copy of this message
Note Submitter: shimon_d at hotmail dot com ---- password security: when you hash passwords to save them in cookie , url ,etc' my sugsession is to hash them with date becouse of evry body can view server log or any other loged info and reuse the hash ie.: to re call a url eg. admin.php?user=root&passhash=5rft346tert in this example the password keepped in secret but what stopping me to reuse the url hash("secret") // bad security hash("secret".date("Ymg")) // better security // the hash good only for today

« previous php.notes (#202351) next »