info/php-the-right-way
1
0
Fork 0
mirror of https://github.com/codeguy/php-the-right-way.git synced 2025-08-25 14:30:47 +02:00
Code Issues Projects Releases Wiki Activity

Merge branch 'gh-pages' of https://github.com/mkyaw/php-the-right-way into gh-pages

Browse Source
This commit is contained in:
Phil Sturgeon
2016-11-12 15:30:39 -05:00
parent c1a22485b9 246d08a538
commit 8fdb569bc1
14 changed files with 19 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
_posts/10-03-01-Password-Hashing.md
View File

@@ -8,8 +8,8 @@ anchor: password_hashing
Eventually everyone builds a PHP application that relies on user login. Usernames and passwords are stored in a
database and later used to authenticate users upon login.
It is important that you properly [_hash_][3] passwords before storing them. Password hashing is an irreversible, one
way function performed against the user's password. This produces a fixed-length string that cannot be feasibly
It is important that you properly [_hash_][3] passwords before storing them. Password hashing is an irreversible,
one-way function performed against the user's password. This produces a fixed-length string that cannot be feasibly
reversed. This means you can compare a hash against another to determine if they both came from the same source string,
but you cannot determine the original string. If passwords are not hashed and your database is accessed by an
unauthorized third-party, all user accounts are now compromised.