Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Per Jessen
Thodoris wrote: So what do you think is the best way to use crypt, mcrypt, hash or perhaps md5 and what are really the differences because I am not sure if I get it right. We use md5 for that sort of thing. /Per Jessen, Zürich -- PHP General Mailing List (http://www.php.net/) To

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Thodoris
Thodoris wrote: So what do you think is the best way to use crypt, mcrypt, hash or perhaps md5 and what are really the differences because I am not sure if I get it right. We use md5 for that sort of thing. /Per Jessen, Zürich I've noticed that crypt uses all the

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Richard Heyes
Hi guys I have developed an intranet web interface with user access. I am storing the passwords into a mysql table as raw text (I know not so secure). So I am adding group access features and I am thinking to encrypt the passwords because this seems to grow as a project although it started

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Thodoris
Hi guys I have developed an intranet web interface with user access. I am storing the passwords into a mysql table as raw text (I know not so secure). So I am adding group access features and I am thinking to encrypt the passwords because this seems to grow as a project although it started as

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Richard Heyes
Thanks Richard for clearing this out but I meant hashing on the first place. And yet you mentioned mcrypt. Clue is in the name. Can you please give a some sample piece on how you do this. There's undoubtedly numerous examples out there. Try the PHP manual to start with. -- Richard Heyes

RE: [PHP] Adding encryption to passwords

2008-09-19 Thread Leon du Plessis
You can try the MySQL built in functions. Ie encode(str, key) insert into test (password) values (encode(mypass,some key)); You can then use the decode() functions in your matching queries. You also need to consider security of your php code, as the key to decode will be in the query strings.

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread clive
Per Jessen wrote: We use md5 for that sort of thing. there is also SHA-1 bit more overhead, bit more secure than md5 -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread n3or
I use SHA-256 (use hash - php.net/manual/en/function.hash.php), because its a little bit more secure then md5 or SHA-1. BTW: Don't forget the salts.. -- Viele Grüße Dominik Strauß - www.n3or.de Webentwicklung, PHP und Linux Mobil: 0178 4940605 Internet: www.n3or.de E-Mail: [EMAIL PROTECTED]

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Thodoris
I use SHA-256 (use hash - php.net/manual/en/function.hash.php), because its a little bit more secure then md5 or SHA-1. BTW: Don't forget the salts.. Thanks for the feedback guys it was quite helpful. -- Thodoris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit:

RE: [PHP] Adding encryption to passwords

2008-09-19 Thread Boyd, Todd M.
-Original Message- From: Thodoris [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2008 7:42 AM To: [EMAIL PROTECTED] Cc: php-general@lists.php.net Subject: Re: [PHP] Adding encryption to passwords I use SHA-256 (use hash - php.net/manual/en/function.hash.php), because

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Nathan Rixham
Per Jessen wrote: Thodoris wrote: So what do you think is the best way to use crypt, mcrypt, hash or perhaps md5 and what are really the differences because I am not sure if I get it right. We use md5 for that sort of thing. /Per Jessen, Zürich sha 256 is my prefered encryption, no

Re: [PHP] Adding encryption to passwords

2008-09-19 Thread Philip Thompson
On Sep 19, 2008, at 9:00 AM, Nathan Rixham wrote: Per Jessen wrote: Thodoris wrote: So what do you think is the best way to use crypt, mcrypt, hash or perhaps md5 and what are really the differences because I am not sure if I get it right. We use md5 for that sort of thing. /Per Jessen,