note 55973 added to function.md5
| From: | alexatblackkettledotorg at osu1 dot php dot net | Date: | Fri, 19 Aug 2005 13:32:15 +0000 |
| Subject: | note 55973 added to function.md5 | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-93899@lists.php.net to get a copy of this message | ||
Helpful Harry, and those following:
Careful. You've just traded a little security for a little obscurity. If an attacker figures
out the scheme (whether through looking at the source or otherwise), all your code does is reduce
the amount of possible passwords they've got to check in a brute force attack, because
you've given them part of the plaintext. Your scheme is almost certainly less secure than md5
alone would be. I'll admit, it's a really nice red herring, though...
----
Manual Page -- http://www.php.net/manual/en/function.md5.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+55973
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes&reason=useless
Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes&reason=non-english
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+55973&report=yes
Search -- http://master.php.net/manage/user-notes.php