Re: Secure way to handle pw on session.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



You should never store a user's password. Instaed immediatly do an SHA1 hash of the password and compare that to the hashed password in your database. It doesn't make any sense to store passwords in clear text. Even if they found the hash they wouldn't be able to reverse it (hashes are once way since they are like a sum, the inverse is impossible to compute).


- Dan

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux