Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

PHP Security question

Name: Anonymous 2010-04-30 17:38

Quick question from a PHP noob:

I want to put a password into a mysql db by hashing it first, and then sending the hash.  Is there a security risk here?  I don't know enough about where things are happening (client vs server, etc...) to know.

Name: Anonymous 2010-04-30 18:01

>>2
1. You're right, sorry about the lack of details.  Like I said, I don't know enough to know what's important.  I come from a systems programming background and am trying to learn this stuff.

2.  You answered my every question awesomely!  Seriously, thanks a ton.

3.  I actually am doing this:

quote:
What you need to do is use HTTPS, so the information is encrypted as it goes over the network. If you're dealing with a thing where users register and then log in later, you can get away with only using it for the registration step, and using something like client-side (using Javascript) hashing with a cryptographic nonce for the log-in.

Because it seemed like the best way to do it, I just wasn't sure if the javascript happens client side or server side.  That's my fault for not reading enough, but I was happy just so get something running in XAMPP, that I didn't stop to think if the way I was doing it was "correct".

Thank you!

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List