Click here to Skip to main content
15,887,214 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
See more:
Hi I am trying to store users' passwords securely and I know if I mess up its a big deal.I am new to Cryptography and I heard that using PHpass with Blowfish Crypt is the best? How would I start using it (as well as server setup(I'm currently using EasyPHP for dev))?

Also, and this is the big question, from the docs I understand that the salt is random. If so, how would I get the salt to make sure that the users' password is correct?

Also, the docs state that the database settings must be kept in a config file. What are the benefits of doing this?

Sorry for the newb questions but I am worried that I misunderstand the docs or Google and create a huge security gap.

Thanks in advance

Jacques

P.S. This is an open source project I am working on, so assume the attackers can get the source as well.
Posted
Updated 10-Apr-14 4:44am
v2

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900