Pārlūkot izejas kodu

better password hashing maybe?

devel
Rick Payton pirms 7 gadiem
vecāks
revīzija
da3066e777
1 mainītis faili ar 2 papildinājumiem un 1 dzēšanām
  1. +2
    -1
      login.php

+ 2
- 1
login.php Parādīt failu

@@ -12,7 +12,8 @@ $con = new mysqli(DATABASE_HOST, DATABASE_USER, DATABASE_PASS, DATABASE_NAME);
session_start();
$username = mysqli_real_escape_string($con, $_POST['username']);
$password = mysqli_real_escape_string($con, $_POST['password']);
$password = sha1($password);
# $password = sha1($password); //this is the original line of code, just found sha1isn't any better than md5
$password = password_hash($password, PASSWORD_BCRYPT);
if ($con->connect_errno > 0){
die ('Unable to connect to database [' . $db->connect_errno . ']');
}


Notiek ielāde…
Atcelt
Saglabāt