note 13825 deleted from function.crypt by jimw

From: Date: Sat, 03 Nov 2001 18:19:17 +0000
Subject: note 13825 deleted from function.crypt by jimw
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-20375@lists.php.net to get a copy of this message
Wondering if sending the SALT chars in a long randomly generated string is possible and meaningful ? Ok, We all know that the password from client side is posted or linked as a plain text. But if you pass your 2 characters SALT in the middle of a long string , say the 1st of the SALT is the 12th char of the 40 chars string and the sectond of the SALT is the 37th ? For this you have to generate that long 40 chars string and make the 12th and 27th changed with your SALT. So nobody can steal your salt passed and no meaning has the 8 chars password string. Am I right? What do you people think ?

« previous php.notes (#20375) next »