Re: Scripting Languages and Secure Coding + code

[ck () kuckuk com]

DP> Regarding the use of MD5...

DP> I'd recommend SHA1 for a couple reasons:

And don't forget to throw some salt in in order to avoid dictionary
attacks. Create a random character or string "salt", and store both
the salt, and the hash value of salt x password in your account table.
Actually there was also some weakness in this, and if I can trust my
memory correctly, it's even better to use hash( salt x hash(password))
or hash(hash(password) x salt) or so.