Posted by Carl Vondrick on 01/31/06 06:48

gene.ellis@gmail.com wrote:
> I am using PHP to allow users to create profiles on our website and
> store them in a MS SQL database and I am wondering, how can I encrypt
> the passwords? Also, how would I be able to match the right password
> when it is time to retrieve the password from the database? Thank you
> very much for your help!

You should use MD5 *and* SHA1. If you use both, you make the hash
almost impossible to find collisions.

Example:

$pass = md5($pass) . '-' . sha1($pass);

Add as many as encryption functions like this to get an added security
boost.


--


Carl Vondrick
usenet@carlsoft.net
www.carlsoft.net

• Next in forum: Re: Undefined variable error message, how can i define it?
• Prev in forum: Re: Warning: mail() [function.mail]" Failed to receive in
• Thread view: Re: How to store and retrieve encrypted password?

[Reply to this message]