Login Register






Thread Rating:
  • 0 Vote(s) - 0 Average


How to hash password correctly in PHP? filter_list
Author
Message
RE: How to hash password correctly in PHP? #15
(08-25-2017, 10:00 PM)Jakub Wrote:
(08-25-2017, 09:53 PM)Sikom Wrote:
(08-25-2017, 09:51 PM)Jakub Wrote: Im hashing passwords on my websites/scripts using double md5 + salt and i personally prefer this way.

md5 is not really secure though is it?

i'm working with it for 1 year now and for now it's okay. But i have my own "hash" function so if double md5 with salt fails i will switch to my hash function

This beyond stupid.
MD5 was peer reviewed and looked over by tons of security experts, yet it was still broken.
Your own algorithm is probably not as advanced as MD5, and is a major security hole.

Use bcrypt or something ffs

PHP has a password_hash() function for a reason. Use it, the default algorithm is BCRYPT. @Sikom this goes to you aswell.
(This post was last modified: 08-26-2017, 12:00 AM by Blink.)


(11-02-2018, 02:51 AM)Skullmeat Wrote: Ok, there no real practical reason for doing this, but that's never stopped me.

[+] 2 users Like Blink's post
Reply





Messages In This Thread
How to hash password correctly in PHP? - by Sikom - 05-29-2017, 10:10 PM
RE: How to hash password correctly in PHP? - by Blink - 08-25-2017, 11:54 PM



Users browsing this thread: 1 Guest(s)