Lost Password?


Go Back   CodeCall Programming Forum > Web Development Forum > PHP Forum

PHP Forum Use this forum to discuss all aspects of PHP Development. PHP is a server-side, cross-platform, HTML embedded scripting language that lets you create dynamic web pages.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 06-24-2007, 05:34 PM
RobSoftware RobSoftware is offline
Programmer
 
Join Date: Nov 2005
Posts: 143
Rep Power: 12
RobSoftware is on a distinguished road
Default Encrypting Contents

Using MySQL and PHP I need to encrypt some data. This will be things like Credit Cards, Address and other confidential information. I've looked at MD5, is this the best method for security in PHP/MySQL?

What are my other options?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

Sponsored Links
  #2 (permalink)  
Old 06-24-2007, 06:24 PM
John's Avatar   
John John is offline
Co-Administrator
 
Join Date: Jul 2006
Age: 20
Posts: 3,433
Last Blog:
Google Web Toolkit
Rep Power: 20
John has a reputation beyond reputeJohn has a reputation beyond reputeJohn has a reputation beyond reputeJohn has a reputation beyond reputeJohn has a reputation beyond reputeJohn has a reputation beyond reputeJohn has a reputation beyond reputeJohn has a reputation beyond reputeJohn has a reputation beyond reputeJohn has a reputation beyond reputeJohn has a reputation beyond repute
Send a message via AIM to John Send a message via MSN to John
Default

MD5 is probably the most widely used encryption, but as time goes on it is becoming less secure, especially with easy passwords.

I found this site the other day and I ran my users passwords through the site. The site cracked 9 out of every 10 passwords that were in my database, even passwords like - "jxksye."

I believe SHA-1 and ROT-13 encryption is becoming more popular but I have never looked into it.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 06-25-2007, 12:49 AM
v0id's Avatar   
v0id v0id is offline
Retired
 
Join Date: Apr 2007
Location: Denmark
Posts: 2,635
Last Blog:
CherryPy(thon)
Rep Power: 28
v0id is a glorious beacon of lightv0id is a glorious beacon of lightv0id is a glorious beacon of lightv0id is a glorious beacon of lightv0id is a glorious beacon of lightv0id is a glorious beacon of light
Send a message via MSN to v0id
Default

First of all, just to point out: MD5 is not an encryption, it's an one-way hash function.

When "cracking" MD5-hashes, you actually don't crack them. You just make a lot of permutations, hashes each one of them and checks if the new hash is identical with the hash you're trying to "crack". MD5 is like I said, an one-way hash, so it isn't possible to "crack" it (not yet...)

To be honest I don't know what hash function or encryption is the best right now, but I think MD5 is still secure enough to use, though Sidewinder showed how it can be "cracked". If you're running it through an application it's even faster.
You can also take a look at the crypt-function in PHP, maybe it's something for you. I haven't used it by myself.

http://php.net/crypt
__________________
05-03-2007 - 11-13-2008
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 06-26-2007, 09:00 AM
RobSoftware RobSoftware is offline
Programmer
 
Join Date: Nov 2005
Posts: 143
Rep Power: 12
RobSoftware is on a distinguished road
Default

I do not understand, I've always been taught that MD5 was encryption although I knew it was a one-way hash. Isn't this a form of encryption?

Sidewinder, what is this site you used? I'm interested in it.

Last edited by John; 06-26-2007 at 04:32 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Global variables (SERVER) Jaan PHP Tutorials 0 03-22-2007 10:43 PM
How to store file contents in an array? vithasekar Java Help 2 01-13-2007 03:24 AM


All times are GMT -5. The time now is 05:02 PM.

Contest Stats

WingedPanther ........ 2753.6
Xav ........ 2704
Brandon W ........ 1702.32
John ........ 1207.73
marwex89 ........ 1175.24
morefood2001 ........ 966.05
dcs ........ 655.75
Steve.L ........ 475.59
orjan ........ 418.58
Aereshaa ........ 383.54

Contest Rules

CodeCall Goal

Goal: 100,000 Posts
Complete: 98%

Ads