3 ms·

But encrypting the passwords with a key on the server is an additional "layer of security" that doesn't actually making it harder to crack. You're just adding c

• m_eiman 17y ago
  It prevents you from getting the passwords with an SQL injection attack (or by reading the users.txt or whatever storage is used for the user list), so it does add protection.
  • Hexstream 17y ago
    Ok, I was assuming the attacker had full access to the server.