cluce Posted June 15, 2007 Share Posted June 15, 2007 I have a login page where a user logs in but I will not have a registration page. I know all about salt, md5, sha-1 and password function by mysql. I am trying to think of the best secure method in storing all the users passwords. I will not have a registration page so I dont know how I can add salt to it without that. Maybe md5 or sha-1 will be secure enought I am not sure yet. *I already have a list of the usernames and passwords that I plan on imporintg into the table .Any ideas is greatly appreciated? Link to comment https://forums.phpfreaks.com/topic/55776-any-tips-on-storing-passwords-securely-in-a-database/ Share on other sites More sharing options...
akitchin Posted June 15, 2007 Share Posted June 15, 2007 generally, if you restrict the password in plaintext to only being transferred during the one act of logging in, you should be okay. store it in the session, the database, and anywhere else you'll be keeping it for more than one transaction in its hashed form. MD5() will likely suffice, as i tend to think that anyone who can bypass or crack an MD5()'d password also has the patience and/or intelligence to circumvent any more elaborate schemes you may have. Link to comment https://forums.phpfreaks.com/topic/55776-any-tips-on-storing-passwords-securely-in-a-database/#findComment-275561 Share on other sites More sharing options...
cluce Posted June 18, 2007 Author Share Posted June 18, 2007 thats good to know. thanks Link to comment https://forums.phpfreaks.com/topic/55776-any-tips-on-storing-passwords-securely-in-a-database/#findComment-276754 Share on other sites More sharing options...
aniesh82 Posted June 18, 2007 Share Posted June 18, 2007 Please go through the page if you have enough time: Password Hashing http://phpsec.org/articles/2005/password-hashing.html Link to comment https://forums.phpfreaks.com/topic/55776-any-tips-on-storing-passwords-securely-in-a-database/#findComment-276764 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.