Went through the SQL injection demo, and it recommends parametrized queries. Excellent. EDIT: Joined with Github, went through the password handling section,

Went through the SQL injection demo, and it recommends parametrized queries. Excellent. EDIT: Joined with Github, went through the password handling section, then saw this: http://i.imgur.com/H4h5FUY.png http://i.imgur.com/H4h5FUY.png No no no no NO! Do NOT use SHA256 for passwords. https://paragonie.com/blog/2016/02/how-safely-store-password-in-2016 https://paragonie.com/blog/2016/02/how-safely-store-password... https://codahale.com/how-to-safely-store-a-password/ https://codahale.com/how-to-safely-store-a-password/ PBKDF2-SHA256 with 100k or more iterations? Okay, fine. SHA256 the cryptographic hash function not designed for password storage? Bad advice.