correct use of hash?

[dadamssg]

im trying to come up with some of hash value based upon two values...im not real sure if hash() takes two and jumbles them up and spits out some hash. thats what i want. so anyways ive made these variables which work

 

$username = clean_data($_POST['username']);

$password = clean_data($_POST['password']);

 

i want to use them like this

 

$confirmhash = hash('$username', '$password');

 

so then i can put that hash in my db...will this work or am i doing something completely wrong?

[9three]

If you are accepting input from users, you need to use mysql_real_escape string to stop SQL injections.

 

You can use md5 to encrypt the information.

 

$username = mysql_real_escape_string(($_POST['username']));

$password = mysql_real_escape_string(($_POST['password']));

[dadamssg]

right, thats what the clean_data() function i created is...im wondering about the hash though

[Mchl]

Why don't you check out hash in manual? It's all there.

 

And no... you don't need to escape string, that's going to be hashed anyway... (Unless you want to hash it using MySQL's hashing functions)