2 ms·
I really, really, really wish that GoPHP5 Round Two [1] takes off and all the popular blog & forum programs get on board. PHP 5.3.7 is the first version of PHP
by kijin 13y ago
I really, really, really wish that GoPHP5 Round Two [1] takes off and all the popular blog & forum programs get on board.
PHP 5.3.7 is the first version of PHP that is guaranteed to come with a proper implementation of bcrypt. All versions before 5.3.7 either don't support it at all, depend on the OS to support it, or have the wrong implementation. phpass won't help you; it just produces a weaker, "portable", md5-based hash, as it does in WordPress by default.
As a result, no open-source blog or forum program that needs to support PHP versions lower than 5.3.7 can use bcrypt by default. Since the world isn't going to abandon PHP any time soon, the only option is to force every web hosting company to upgrade PHP to 5.3.7 or higher.
[1] https://groups.google.com/forum/#!topic/php-fig/ogp03OHbVJ0 https://groups.google.com/forum/#!topic/php-fig/ogp03OHbVJ0