note 23355 added to function.crypt
| From: | erlendwa at stud dot ntnu dot no | Date: | Tue, 16 Jul 2002 13:03:39 +0000 |
| Subject: | note 23355 added to function.crypt | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-33124@lists.php.net to get a copy of this message | ||
The result of the crypt function (php 4.2.1) seems to include the first two letters of the salt as
it's own two first letters. This means that using your password as salt for the .htaccess,
reveals the two first letters of your password to anyone able to read the .htaccess...
--
http://www.php.net/manual/en/function.crypt.php
http://master.php.net/manage/user-notes.php?action=edit+23355
http://master.php.net/manage/user-notes.php?action=delete+23355
http://master.php.net/manage/user-notes.php?action=reject+23355