PHP Password Hashing

Question

As of now I have this line of code

<?php $pass = "12312312"; echo md5(crypt($pass)) ?>

I know crypt can randomly generate salt but I don't have any idea how can I compare it on the user input.

What are the fields do I need for my log in table? and also, what data will I insert to my table?

thanks!

md5 is broken, so you should use something else. try bcrypt. — Oleksi
– Oleksi, Commented May 24, 2012 at 5:00
thanks!! but what fields do I need? hmm can I insert both the password with salt in 1 field? or I need to have a salt field ? — user1033600
– user1033600, Commented May 24, 2012 at 5:03
this is my table structure tblogin user_id username password salt is this correct? — user1033600
– user1033600, Commented May 24, 2012 at 5:08

Sanjay · Accepted Answer · 2012-05-24 06:12:03Z

You can store password in table as below

$pass = "12312312"; // store this in table with separate column $salt = md5("any variable"); // may be email or username // generate password $password = sha1($salt.$pass); // now store salt and password in table

And you can check password like

$pass = "User input"; // get the user from database based on user id or username // and test the password stored in db with if($passwordFromTable == sha1($saltFromTable.$pass)) { // correct }

Collectives™ on Stack Overflow

PHP Password Hashing

1 Answer 1

Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Related