note 14187 deleted from function.md5 by jimw
| From: | jimw@php.net | Date: | Sat, 08 Dec 2001 20:02:20 +0000 |
| Subject: | note 14187 deleted from function.md5 by jimw | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-22168@lists.php.net to get a copy of this message | ||
This can be used in conjunction with a JavaScript implementation of MD5 (e.g. http://pajhome.org.uk/crypt/md5) to do a login form that
avoids the user's password ever being transmitted in the clear.
[Ed: This actually makes very little difference to the security of your site, I can sniff this
md5'd password and then just login by sending that md5'd version of the password without
knowing the real one to your webserver and it makes no difference to me, I can still log in. - James
<jmoore at php.net>]