password encryption crypt()

[182x]

Hey guys,

 

For logging into a website and creating users I use the following encryption, I was just wondering can the '.v' parameter be anything and is  this a good method of encryption?

 

Thanks

 

crypt($_POST['password'], '.v')

[chronister]

The .v is called the salt. I am not completely clear on what purpose the salt serves. Yes it can be anything. If you just use crypt($string) then it will auto-generate a 2 digit salt.

 

Yes is is a good method of encryption. Be aware that it is a one way encryption and cannot be decrypted. But you don't want passwords to be decrypted anyway.

 

hope this helps