If using crypt(), what's a good idea for the salt? the first two letters of the password? i.e. $password = crypt('password', 'pa'); also, is the length of the string returned by crypt() always the same length? -Kyle |-----Original Message----- |From: Blain [mailto:Blain@gmx.ch] |Sent: Saturday, April 12, 2003 1:43 PM |To: Kyle Slattery; php-db@lists.php.net |Subject: AW: how to encrypt passwords? | | |Some people believe that crypt is more secure.... | |-----Ursprüngliche Nachricht----- |Von: Kyle Slattery [mailto:kyle@fidgeting.net] |Gesendet: Samstag, 12. April 2003 19:36 |An: PHP-DB |Betreff: how to encrypt passwords? | | |I'm trying to decide on a way to encrypt passwords to be put in a mysql |database. Do you guys have any opinions on what method I should use? |md5()? mysql's password()? | |Thanks, |Kyle | |---- |Kyle Slattery |kyle@fidgeting.net |http://www.fidgeting.net | | |-- |PHP Database Mailing List (http://www.php.net/) |To unsubscribe, visit: http://www.php.net/unsub.php | | | | | -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php