note 55973 added to function.md5

From: Date: Fri, 19 Aug 2005 13:32:15 +0000
Subject: note 55973 added to function.md5
Groups: php.notes 
Request: Send a blank email to php-notes+get-93899@lists.php.net to get a copy of this message
Helpful Harry, and those following: Careful. You've just traded a little security for a little obscurity. If an attacker figures out the scheme (whether through looking at the source or otherwise), all your code does is reduce the amount of possible passwords they've got to check in a brute force attack, because you've given them part of the plaintext. Your scheme is almost certainly less secure than md5 alone would be. I'll admit, it's a really nice red herring, though... ---- Manual Page -- http://www.php.net/manual/en/function.md5.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+55973 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes&reason=non-english Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+55973&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+55973&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#93899) next »