note 56001 added to function.md5

alex at blackkettle: "Your scheme is almost certainly less secure than md5 alone would be" Not true. The method Harry uses does not trade "a little security for a little obscurity". None of the actual password plaintext is revealed in the stored value. The *random* seed is stored because it is random and would otherwise be unrecoverable. Harry's method doesn't reduce the number of passwords that a brute-force would have to check and in fact, if the attacker cannot see the code, they would not know if the stored value was md5 or sha1. The main advantage is that passwords will never have the same md5 hash because they are compounded with a random seed. An attacker would have to add the seed for each check. Adding the obscurity of md5/sha1 is another barrier for an attacker to get past and it's a good idea. ---- Manual Page -- http://www.php.net/manual/en/function.md5.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+56001 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+56001&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+56001&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+56001&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+56001&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+56001&report=yes&reason=non-english Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+56001&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+56001&report=yes Search -- http://master.php.net/manage/user-notes.php