3 ms·
yes, I put the first salt in database and the second salt under www-root. Hacker who hack the database only will not know the fist salt.
by Misiek 14y ago
yes, I put the first salt in database and the second salt under www-root. Hacker who hack the database only will not know the fist salt.
- leftnode 14y agoI think you have to assume worst case: if they have access to your database, they have access to your web root. It might not be the case, but you should assume that.