Storing Passwords

[DrJohnZoidberg]

Found this little video that explains what developers shouldn't do, thought I'd post it as a refresher

I had to implement a php login process the other day and found a nice tutorial online which explains how to do it correctly: http://www.wikihow.com/Create-a-Secure-Login-Script-in-PHP-and-MySQL

Here is the video:

[video=youtube_share;8ZtInClXe1Q]http://youtu.be/8ZtInClXe1Q[/video]

 

[_kabal_]

I gather this tells you not to use plain text or MD5

 

[IziWhatNow]

Hashing and salting - what we also use

 

[Mr.Jax]

I used this writeup for guidance

http://crackstation.net/hashing-security.htm

Worth the read!

 

[shauntir]

I used this writeup for guidance

http://crackstation.net/hashing-security.htm

Worth the read!

Nice article!