note 20855 deleted from function.md5 by jimw
| From: | jimw@php.net | Date: | Sat, 08 Feb 2003 19:48:08 +0000 |
| Subject: | note 20855 deleted from function.md5 by jimw | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-43630@lists.php.net to get a copy of this message | ||
In regard to the comment by mogster@boomdesign.no:
If you md5 a password and submit that in a form over an unencrypted link instead of submitting the
plain password, then all the hacker needs to do is steal the md5 code to log in. It doesn't
really increase security very much, except that it's harder to brute-force guess the password.
The best way to go is to use a SSL page... it's secure, fairly easy, and will work fine with
your existing code.
Owen