Create an account

Very important

  • To access the important data of the forums, you must be active in each forum and especially in the leaks and database leaks section, send data and after sending the data and activity, data and important content will be opened and visible for you.
  • You will only see chat messages from people who are at or below your level.
  • More than 500,000 database leaks and millions of account leaks are waiting for you, so access and view with more activity.
  • Many important data are inactive and inaccessible for you, so open them with activity. (This will be done automatically)

0Day Forums Coding PHP How to hash password correctly in PHP?

Thread Rating:
  • 149 Vote(s) - 3.34 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Options
How to hash password correctly in PHP?

Offline postscapular740546


Member
*
Member
Posts: 0
Threads: 0
Joined: Oct 2017
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#11
08-25-2017, 07:17 PM
Quote:(08-25-2017, 10:00 PM)Jakub Wrote:

[To see links please register here]

Quote: (08-25-2017, 09:53 PM)Sikom Wrote:

[To see links please register here]

Quote: (08-25-2017, 09:51 PM)Jakub Wrote:

[To see links please register here]

Im hashing passwords on my websites/scripts using double md5 + salt and i personally prefer this way.

md5 is not really secure though is it?

i'm working with it for 1 year now and for now it's okay. But i have my own "hash" function so if double md5 with salt fails i will switch to my hash function

What do you mean by your own "hash" function? I think MD5 is considered unsecure, and I don't think you should use it.
Reply

Offline Sirnannyspyfhxnuh


Paramount
*******
Paramount
Posts: 0
Threads: 0
Joined: Jul 2017
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#12
08-25-2017, 07:24 PM
Im hashing passwords on my websites/scripts using double md5 + salt and i personally prefer this way.
Reply

Offline mordecaisqqivqem


Valued member
***
Valued member
Posts: 0
Threads: 0
Joined: Dec 2017
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#13
08-25-2017, 07:39 PM
I have my own algorythm, php script which is hashing passwords, texts etc. (i.e. it will change "a" to "#72gwvs&") i'm using that hashing for my own private website where i have all of my projects. Once a month i'm changing algorythm for safety
Reply

Offline Sirronncrq


Valued member
***
Valued member
Posts: 0
Threads: 0
Joined: Jul 2022
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#14
08-25-2017, 08:34 PM
Quote:(08-25-2017, 10:19 PM)Jakub Wrote:

[To see links please register here]

I have my own algorythm, php script which is hashing passwords, texts etc. (i.e. it will change "a" to "#72gwvs&") i'm using that hashing for my own private website where i have all of my projects. Once a month i'm changing algorythm for safety

Do you even know anything about cryptology?
Reply

Offline nijinsky858


Member
*
Member
Posts: 0
Threads: 0
Joined: Jun 2019
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#15
08-25-2017, 09:16 PM
Quote:(08-25-2017, 10:00 PM)Jakub Wrote:

[To see links please register here]

Quote: (08-25-2017, 09:53 PM)Sikom Wrote:

[To see links please register here]

Quote: (08-25-2017, 09:51 PM)Jakub Wrote:

[To see links please register here]

Im hashing passwords on my websites/scripts using double md5 + salt and i personally prefer this way.

md5 is not really secure though is it?

i'm working with it for 1 year now and for now it's okay. But i have my own "hash" function so if double md5 with salt fails i will switch to my hash function

This beyond stupid.
MD5 was peer reviewed and looked over by tons of security experts, yet it was still broken.
Your own algorithm is probably not as advanced as MD5, and is a major security hole.

Use bcrypt or something ffs

PHP has a password_hash() function for a reason. Use it, the default algorithm is BCRYPT. @Sikom this goes to you aswell.
Reply

Offline preciousiehwd


Member
*
Member
Posts: 0
Threads: 0
Joined: May 2019
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#16
08-25-2017, 09:34 PM
Never try to out think crackers man, never use your own algorithm, always use opensourced crypto.
Reply

Offline kanchenjunga820


Valued member
***
Valued member
Posts: 0
Threads: 0
Joined: May 2020
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#17
08-26-2017, 02:55 AM
Quote:(08-25-2017, 11:54 PM)Ender Wrote:

[To see links please register here]

PHP has a password_hash() function for a reason. Use it, the default algorithm is BCRYPT.

This ^^ Enough said.

It's key stretching algorithm speaks for Itself.
Reply

Offline nucleinic746989


Valued member
***
Valued member
Posts: 0
Threads: 0
Joined: Sep 2018
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#18
08-26-2017, 08:44 AM
Quote:(08-25-2017, 11:54 PM)Ender Wrote:

[To see links please register here]

Quote: (08-25-2017, 10:00 PM)Jakub Wrote:

[To see links please register here]

Quote: (08-25-2017, 09:53 PM)Sikom Wrote:

[To see links please register here]

md5 is not really secure though is it?

i'm working with it for 1 year now and for now it's okay. But i have my own "hash" function so if double md5 with salt fails i will switch to my hash function

This beyond stupid.
MD5 was peer reviewed and looked over by tons of security experts, yet it was still broken.
Your own algorithm is probably not as advanced as MD5, and is a major security hole.

Use bcrypt or something ffs

Would agree with that being beyond stupid


Is this a good solution @'ender'?

Hidden Content
You must

[To see links please register here]

or

[To see links please register here]

to view this content.

Reply

Offline typmygbvodr


Member
*
Member
Posts: 0
Threads: 0
Joined: Apr 2018
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#19
08-26-2017, 10:16 AM
Quote:(08-26-2017, 11:15 AM)Sikom Wrote:

[To see links please register here]

Quote: (08-25-2017, 11:54 PM)Ender Wrote:

[To see links please register here]

Quote: (08-25-2017, 10:00 PM)Jakub Wrote:

[To see links please register here]

i'm working with it for 1 year now and for now it's okay. But i have my own "hash" function so if double md5 with salt fails i will switch to my hash function

This beyond stupid.
MD5 was peer reviewed and looked over by tons of security experts, yet it was still broken.
Your own algorithm is probably not as advanced as MD5, and is a major security hole.

Use bcrypt or something ffs

Would agree with that being beyond stupid


Is this a good solution @'ender'?

Hidden Content
You must

[To see links please register here]

or

[To see links please register here]

to view this content.

This is not a good solution.
Use BCRYPT man
Reply

Offline chiarakhalawsn


Member
*
Member
Posts: 0
Threads: 0
Joined: Jul 2022
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#20
08-26-2017, 06:06 PM
Quote:(08-26-2017, 12:48 PM)Pikami Wrote:

[To see links please register here]

Quote: (08-26-2017, 11:15 AM)Sikom Wrote:

[To see links please register here]

Quote: (08-25-2017, 11:54 PM)Ender Wrote:

[To see links please register here]

This beyond stupid.
MD5 was peer reviewed and looked over by tons of security experts, yet it was still broken.
Your own algorithm is probably not as advanced as MD5, and is a major security hole.

Use bcrypt or something ffs

Would agree with that being beyond stupid


Is this a good solution @'ender'?

Hidden Content
You must

[To see links please register here]

or

[To see links please register here]

to view this content.

This is not a good solution.
Use BCRYPT man

Why is that not a good solution?
Reply

« Next Oldest
Next Newest »


Forum Jump:


Users browsing this thread:
1 Guest(s)

©0Day  2016 - 2023 | All Rights Reserved.  Made with    for the community. Connected through