PHP: User Authenticating, What's the most secure?

Q

Question Everything!

New member
-----------------------------------One Idea
To login a user in is it better to have a string that combines 'Xyz123' & the users password & username in a sha1 form and use this to confirm them against the database insteat of there username and password in sha1 form in 2 fields within the database?
(That might be a little hard to understand.)
 
Standard is md5 + a salt.
$salt = "!@#(U)Z";
$salt1 = "LXZKH&";
$securepw = md5($salt."$password".$salt1);

If you want to get fancy, you can md5 the md5. And that just makes it even harder to crack.
 
Back
Top