note 52051 added to function.crypt

Even worse, using the first two letters of the password as the salt removes the whole point of having salt in the first place, which is that without it, it's trivial to create a dictionary of passwords-to-encrypted-passwords. Without salt (or with using a salt directly derived from the password) there's only one possible encrypted password per password. With the two character salt, there's 4096, which makes the idea a lot less feasible. ---- Manual Page -- http://www.php.net/manual/en/function.crypt.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+52051 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+52051&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+52051&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+52051&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+52051&report=yes&reason=useless Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+52051&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+52051&report=yes Search -- http://master.php.net/manage/user-notes.php