Question

How to secure a password using password hashing in PHP

Answer 1

// Researchers have found flaws in the SHA1 and MD5 algorithms. So don't use them, 
// use sha256, sha512 or BCrypt

$rv = mysql_query("INSERT INTO users (user, password)
          VALUES(
            '".$_POST['username']."',
            '".md5($_POST['password'])."'
        )", $con);


$row = mysql_fetch_assoc(mysql_query("SELECT user FROM users WHERE user='{$_POST['username']}' 
                                      AND password='".md5($_POST['password'])."'", $con));


/*
run:
    

      
*/

70+ SQL courses for beginners and professionals

Answer 2

// You can't retrieve a password from a one-way hash
// If the user forgot his password, you need to send him a link for create new password

$password = "12345";
$password = hash("sha256", $password);
echo $password;


/*
run:
    
5994471abb01112afcc18159f6cc74b4f511b99806da59b3caf5a9c173cacfc5 
      
*/

 

70+ SQL courses for beginners and professionals

Answer 3

// You can't "retrieve" a password from a one-way hash like SHA512 
// If use forgot the password, you neet to send him a link for create new password

$password = "12345";
$password = hash("sha512", $password);
echo $password;


/*
run:
    
3627909a29c31381a071ec27f7c9ca97726182aed29a7ddd2e54353322cfb30abb9e3a6df2ac2c20fe23436311d678564d0c8d305930575f60e2d3d048184d79 
      
*/

 

70+ SQL courses for beginners and professionals