Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Philip Thompson
On Sep 19, 2008, at 9:00 AM, Nathan Rixham wrote: Per Jessen wrote: Thodoris wrote: So what do you think is the best way to use crypt, mcrypt, hash or perhaps md5 and what are really the differences because I am not sure if I get it right. We use md5 for that sort of thing. /Per Jessen,

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Nathan Rixham
Per Jessen wrote: Thodoris wrote: So what do you think is the best way to use crypt, mcrypt, hash or perhaps md5 and what are really the differences because I am not sure if I get it right. We use md5 for that sort of thing. /Per Jessen, Zürich sha 256 is my prefered encryption, no c

RE: [PHP] Adding encryption to passwords

2008-09-19 Thread Boyd, Todd M.
> -Original Message- > From: Thodoris [mailto:[EMAIL PROTECTED] > Sent: Friday, September 19, 2008 7:42 AM > To: [EMAIL PROTECTED] > Cc: php-general@lists.php.net > Subject: Re: [PHP] Adding encryption to passwords > > > > I use SHA-256 (use hash - php.n

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Thodoris
I use SHA-256 (use hash - php.net/manual/en/function.hash.php), because its a little bit more secure then md5 or SHA-1. BTW: Don't forget the salts.. Thanks for the feedback guys it was quite helpful. -- Thodoris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: ht

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread n3or
I use SHA-256 (use hash - php.net/manual/en/function.hash.php), because its a little bit more secure then md5 or SHA-1. BTW: Don't forget the salts.. -- Viele Grüße Dominik Strauß - www.n3or.de Webentwicklung, PHP und Linux Mobil: 0178 4940605 Internet: www.n3or.de E-Mail: [EMAIL PROTECTED]

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread clive
Per Jessen wrote: We use md5 for that sort of thing. there is also SHA-1 bit more overhead, bit more secure than md5 -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP] Adding encryption to passwords

2008-09-19 Thread Leon du Plessis
will be in the query strings. There are other built-in encryptions functions in MySQL you can explore. -Original Message- From: Thodoris [mailto:[EMAIL PROTECTED] Sent: 19 September 2008 10:25 AM To: PHP General list Subject: [PHP] Adding encryption to passwords Hi guys I have devel

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Richard Heyes
> Thanks Richard for clearing this out but I meant hashing on the first place. And yet you mentioned mcrypt. Clue is in the name. > Can you please give a some sample piece on how you do this. There's undoubtedly numerous examples out there. Try the PHP manual to start with. -- Richard Heyes H

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Thodoris
Hi guys I have developed an intranet web interface with user access. I am storing the passwords into a mysql table as raw text (I know not so secure). So I am adding group access features and I am thinking to encrypt the passwords because this seems to grow as a project although it started as

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Richard Heyes
> Hi guys I have developed an intranet web interface with user access. I am > storing the passwords into a mysql table as raw text (I know not so secure). > So I am adding group access features and I am thinking to encrypt the > passwords because this seems to grow as a project although it starte

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Thodoris
Thodoris wrote: So what do you think is the best way to use crypt, mcrypt, hash or perhaps md5 and what are really the differences because I am not sure if I get it right. We use md5 for that sort of thing. /Per Jessen, Zürich I've noticed that crypt uses all the availab

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Per Jessen
Thodoris wrote: > So what do you think is the best way to use crypt, mcrypt, hash or > perhaps md5 and what are really the differences because I am not sure > if I get it right. We use md5 for that sort of thing. /Per Jessen, Zürich -- PHP General Mailing List (http://www.php.net/) To unsu

[PHP] Adding encryption to passwords

2008-09-19 Thread Thodoris
Hi guys I have developed an intranet web interface with user access. I am storing the passwords into a mysql table as raw text (I know not so secure). So I am adding group access features and I am thinking to encrypt the passwords because this seems to grow as a project although it started a