Why should we change the Security Salt value in CakePHP? and What if we don't change the value?

Recommended Answers

All 2 Replies

Because you want a unique salt? If everyone had the same salt, what's the poiint then? :)

Salt actually increases the complexity of the hashed value and makes dictionary attacks more difficult. The salt should be known only to authorized users (or applications). If you use the default (pre-set) value in CakePHP it's almost like not using the salt since almost everyone knows it or can get hold of it.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.