Rayben Posted January 19, 2007 Share Posted January 19, 2007 Hi!I'm making a loggin system and I wonder if it is risk to keep a password in the $_POST variable?I read a tutorial where the author did this:[code]<?php$_POST['password'] = md5($_POST['password']);?>[/code]Is it possible to change the $_POST variable just like that? Link to comment https://forums.phpfreaks.com/topic/34885-_post-password-security-n00b/ Share on other sites More sharing options...
Jessica Posted January 19, 2007 Share Posted January 19, 2007 Did you try it?I would just take it out of the $_POST for later use, $password = md5($_POST['password']);But why are you asking us if it's possible if you read it and could easily test it? Link to comment https://forums.phpfreaks.com/topic/34885-_post-password-security-n00b/#findComment-164449 Share on other sites More sharing options...
Nameless12 Posted January 19, 2007 Share Posted January 19, 2007 Post variables are not variables, they are not magic. php just happens to store the post data inside an array called $_POST. So whats the point? you can do anything to $_POST that you can with an array and you can do anything to $_GET that you can with an array. Link to comment https://forums.phpfreaks.com/topic/34885-_post-password-security-n00b/#findComment-164488 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.