note 23355 deleted from function.crypt by aidan
| From: | aidan@php.net | Date: | Mon, 05 Jul 2004 10:26:01 +0000 |
| Subject: | note 23355 deleted from function.crypt by aidan | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-72576@lists.php.net to get a copy of this message | ||
Note Submitter: erlendwa@stud.ntnu.no
----
The result of the crypt function (php 4.2.1) seems to include the first two letters of the salt as
it's own two first letters. This means that using your password as salt for the .htaccess,
reveals the two first letters of your password to anyone able to read the .htaccess...