3 ms·
PHP has had a dedicated password hashing function since version 5.5: it's password_hash(). But at least, if you want to roll your own password hashing, do it r
by aruggirello 9y ago
PHP has had a dedicated password hashing function since version 5.5: it's password_hash().
But at least, if you want to roll your own password hashing, do it right: use hmac, salting, stretching and a decent hash function - or use bcrypt/scrypt and save yourself a few headaches.
- stephenr 9y agoI'm well aware of that. The original comment suggested that password hashing is bad, I was trying to identify what the poster thought should be used instead.
- idlewords 9y agoEvergreen: https://codahale.com/how-to-safely-store-a-password/ https://codahale.com/how-to-safely-store-a-password/
- deleted 9y ago[deleted]