note 24598 deleted from function.mhash by peehaa
| From: | peehaa@php.net | Date: | Thu, 23 Apr 2015 09:43:39 +0000 |
| Subject: | note 24598 deleted from function.mhash by peehaa | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-202351@lists.php.net to get a copy of this message | ||
Note Submitter: shimon_d at hotmail dot com
----
password security:
when you hash passwords to save them in cookie , url ,etc' my sugsession is to hash them with
date
becouse of evry body can view server log or any other loged info and reuse the hash
ie.: to re call a url eg. admin.php?user=root&passhash=5rft346tert
in this example the password keepped in secret but what stopping me to reuse the url
hash("secret") // bad security
hash("secret".date("Ymg")) // better security
// the hash good only for today