note 9226 deleted from function.crypt by jimw
| From: | jimw@php.net | Date: | Sat, 03 Nov 2001 18:18:12 +0000 |
| Subject: | note 9226 deleted from function.crypt by jimw | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-20372@lists.php.net to get a copy of this message | ||
Maybe some people don't fully undestand the way these functions work or their usefullness, but
there is a use with regards to passwords. Although its unlikely someone will find it usefull...
Its the use that the original crypt() funcion has on unix sistems. If your password list (or base)
is of public read access a list of MD5 digests can partialy solve the problem of people reading
other user's passwords.
Partialy because a direct dictionary attack will break any simple password. So if you intend to use
it for this your should enforce a correct password selection.
As I said before its not quite usefull... As time has proven a "shadow" aproach is more
convinient.
And ... as many people pointed before... form data is always send as PLAINTEXT through the internet.
So... if you intend to build a secure user/pass environment you should use SSL.