[SOLVED] how to make user name and paswoord more secure

[fansa]

Hallo everybody...

 

How to make our user name and password more secure by using php coding.It is because to prevent our system from hacker. have any suggestion??

[ngreenwood6]

As long as you are using post and not get it should be secure as no one can see it in the url. the only other thing that you could do is md5() the password when it is inserted into the database so that nobody can "hack" it.

[fansa]

ok..i got what u mean..but, can u explain more about md5()??much appreciate for your advice

[trq]

Just store your passwords as an md5'd hash. eg;

 

INSERT INTO users (uname, upass) VALUES ('thorpe', MD5('foo'));

[fansa]

oo like that, that mean the data will auto encrypt once the user key in the data rite?...got idea..thanks a lot.If any another idea,hope will be share together

[bdmovies]

I use sha1 as it is more secure than MD5.

 

$password = sha1(msyql_escape_string($_POST['password']));

$user = mysql_escape_string($_POST['user']);

 

<?php INSERT INTO users (uname, upass) VALUES ('$user', $password);?>