4 ms·
> Store Access Token in PHP $_SESSION I just hope my bank never does this.
by nly 11y ago
> Store Access Token in PHP $_SESSION
I just hope my bank never does this.
- tomschlick 11y agoNope. They just store your 6-8 character password in plaintext behind their huge monolithic Java/.Net/Cobol app.
- function_seven 11y agoThey employ a clever 3-step hashing algorithm, though: 1. Truncate user's password to 8 characters 2. Uppercase the entire thing 3. Convert to EBCDIC
- kalleboo 11y agoWhat would you do instead? (aside from the obvious "not use PHP in the first place")