The "Freeola Customer Forum" forum, which includes Retro Game Reviews, has been archived and is now read-only. You cannot post here or create a new thread or review on this forum.
I've been coding various forms for my new site and using md5 hash and then it occured to me....why? Thanks for any replies
I've been coding various forms for my new site and using md5 hash and then it occured to me....why? Thanks for any replies
Because if you don't encrypt the passwords with MD5 or a similiar form of encryption your site is gonna get raped.
Ah right. How do I go about encrypting query strings. For example..
edit_profile.php?id=1
If some "Rapist" changed the '1' to a '2', then they can edit somebody elses profile
edit_profile.php?id=1
If some "Rapist" changed the '1' to a '2', then they can edit somebody elses profile
Also with md5 some words can produce the same hash code.
So for example the word "cheese" could produce a code like abcdefg
the word hamburger could also produce the code abcdefg
this way if someone has the hash code then there is more than one possible word (or series of words) that could have produced the code making it secure.
So for example the word "cheese" could produce a code like abcdefg
the word hamburger could also produce the code abcdefg
this way if someone has the hash code then there is more than one possible word (or series of words) that could have produced the code making it secure.
Use sessions or cookies.
My knowledge of PHP is poor.
My knowledge of PHP is poor.
AliBoy wrote:
> Also with md5 some words can produce the same hash code.
>
> So for example the word "cheese" could produce a code like
> abcdefg
> the word hamburger could also produce the code abcdefg
>
> this way if someone has the hash code then there is more than one
> possible word (or series of words) that could have produced the code
> making it secure.
Erm, they're not exactly common! MD5 is secure enough for most things where a hash is required, but if you require even higher security, look at SHA.
> Also with md5 some words can produce the same hash code.
>
> So for example the word "cheese" could produce a code like
> abcdefg
> the word hamburger could also produce the code abcdefg
>
> this way if someone has the hash code then there is more than one
> possible word (or series of words) that could have produced the code
> making it secure.
Erm, they're not exactly common! MD5 is secure enough for most things where a hash is required, but if you require even higher security, look at SHA.
Thanks peeps
Dunno what you're coding in, but if you move into Python for your CGI, it has libraries written for encryption out of the box so you can use it without worrying about how it works.
So does PHP.