TalkPHP - View Single Post

Nor · 11-21-2007, 01:42 PM

Quote:

think the best way would be to MD5 the passwords and then apply a salt to them. This will render the passwords useless if the database's security does get breached because although they have the password hashes, they'll be completely different from the hashes stored in Gmail and Hotmail, for instance, and thus no way to deduce any of the same passwords.

Then again we're talking about usernames now passwords + salts.