Re: session management

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!weretis.net!feeder1.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From	"Christoph M. Becker" <cmbecker69@arcor.de>
Newsgroups	comp.lang.php
Subject	Re: session management
Date	Wed, 11 Mar 2015 21:59:37 +0100
Organization	solani.org
Lines	22
Message-ID	<mdqabi$dit$1@solani.org> (permalink)
References	<54f7fce9$0$2983$426a74cc@news.free.fr> <54f835eb$0$2851$e4fe514c@news2.news.xs4all.nl> <54f8450f$0$3374$426a34cc@news.free.fr> <54f8578f$0$2896$e4fe514c@news2.news.xs4all.nl> <u8mlfa51dojg3sfeicl0q6oi2g0ul0dgfr@4ax.com> <cm0c9pFisbdU1@mid.individual.net> <5500a458$0$3065$426a74cc@news.free.fr>
Mime-Version	1.0
Content-Type	text/plain; charset=utf-8
Content-Transfer-Encoding	7bit
X-Trace	solani.org 1426107570 13917 eJwFwQcBwEAIBDBLzKPIKcu/hE9cwegwOMzPb5MJJ0o3Ynk80jWrGEy5ZXFuHcX3U6BL+QEixRFd (11 Mar 2015 20:59:30 GMT)
X-Complaints-To	abuse@news.solani.org
NNTP-Posting-Date	Wed, 11 Mar 2015 20:59:30 +0000 (UTC)
User-Agent	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
X-User-ID	eJwNyMkBwDAIA7CVAhi3jEM49h+h1VNuFNYDOuHrO5qqxxtR3P92RyrZp+2VlLwD3LAomKy3fSPUEVU=
In-Reply-To	<5500a458$0$3065$426a74cc@news.free.fr>
Cancel-Lock	sha1:aJmpqkRRCRsaYnDqX4mnlVkUGAk=
X-NNTP-Posting-Host	eJwFwYEBwCAIA7CXdNAK54DS/09YAuPmPU7QIeg9qV/tWS6smpaFt2hInfwiaGHFKWbOzfkBPzER4g==
Xref	csiph.com comp.lang.php:15101

Show key headers only | View raw

mrr wrote:

> On 03/07/2015 02:21 PM, J.O. Aho wrote:
> 
>> Hashing ain't enough, you need to salt it too, speacially if using weak
>> hashing like sha1.
> 
> English isn't my first language so I'm not sure how that is meant to be
> understand?
> 
> Was that a joke?
> 
> Or should I really begin to search for some technique about adding salt
> to a hashed password?

There's a good FAQ regarding password hashing in the PHP manual:

<http://php.net/manual/en/faq.passwords.php>

-- 
Christoph M. Becker

Thread

session management mrr <mireero@free.fr> - 2015-03-05 08:51 +0100
  Re: session management Erwin Moller <erwinmollerusenet@xs4all.nl> - 2015-03-05 11:54 +0100
    Re: session management mrr <mireero@free.fr> - 2015-03-05 13:59 +0100
      Re: session management Erwin Moller <erwinmollerusenet@xs4all.nl> - 2015-03-05 14:18 +0100
        Thank all! Re: session management mrr <mireero@free.fr> - 2015-03-06 13:47 +0100
          Re: Thank all! Re: session management "J.O. Aho" <user@example.net> - 2015-03-07 08:53 +0100
        Re: session management Jørn Andersen <jorn@jorna.dk> - 2015-03-07 11:59 +0100
          Re: session management "J.O. Aho" <user@example.net> - 2015-03-07 14:21 +0100
            Re: session management mrr <mireero@free.fr> - 2015-03-11 22:23 +0100
              Re: session management Jerry Stuckle <jstucklex@attglobal.net> - 2015-03-11 16:40 -0400
              Re: session management "Christoph M. Becker" <cmbecker69@arcor.de> - 2015-03-11 21:59 +0100
                Re: session management mrr <mireero@free.fr> - 2015-03-13 01:05 +0100
            Re: session management Jørn Andersen <jorn@jorna.dk> - 2015-03-13 02:37 +0100
              Re: session management "Christoph M. Becker" <cmbecker69@arcor.de> - 2015-03-13 02:54 +0100
          Re: session management Richard Damon <Richard@Damon-Family.org> - 2015-03-07 11:29 -0500
          Re: session management Erwin Moller <erwinmollerusenet@xs4all.nl> - 2015-03-09 11:29 +0100
      Re: session management "J.O. Aho" <user@example.net> - 2015-03-05 18:22 +0100
    Re: session management Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2015-03-06 11:33 +0100
  Re: session management Ben Bacarisse <ben.usenet@bsb.me.uk> - 2015-03-05 11:55 +0000

csiph-web