Re: Secure Login Form

[Bipin Upadhyay <muxical.geek () gmail com>]

krymson () gmail com wrote:
[SNIPPED]
> to take the password from the webform and hash it using the SHA1 algorithm
>
> before passing it to the database for a check via a PHP file. I chose the
>
> SHA1 algorithm because MD5, while common, is fairly easy to crack if
>
> someone gets ahold of the MD5 hash. SHA1 is more robust (someone correct
>
> me if I am wrong in this).
SHA1 or MD5, always salt it.
For better results, be paranoid and double hash it. :)
viz.
md5($salt.md5($pass))
md5(md5($salt.$pass)).. etc. etc.

--Bipin Upadhyay,
http://projectbee.org