note 9226 deleted from function.crypt by jimw

From: Date: Sat, 03 Nov 2001 18:18:12 +0000
Subject: note 9226 deleted from function.crypt by jimw
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-20372@lists.php.net to get a copy of this message
Maybe some people don't fully undestand the way these functions work or their usefullness, but there is a use with regards to passwords. Although its unlikely someone will find it usefull... Its the use that the original crypt() funcion has on unix sistems. If your password list (or base) is of public read access a list of MD5 digests can partialy solve the problem of people reading other user's passwords. Partialy because a direct dictionary attack will break any simple password. So if you intend to use it for this your should enforce a correct password selection. As I said before its not quite usefull... As time has proven a "shadow" aproach is more convinient. And ... as many people pointed before... form data is always send as PLAINTEXT through the internet. So... if you intend to build a secure user/pass environment you should use SSL.

« previous php.notes (#20372) next »