943,627 Members | Top Members by Rank

Ad:
  • PHP Discussion Thread
  • Marked Solved
  • Views: 652
  • PHP RSS
Jan 1st, 2009
0

The Most Secure Way Encrypt and Protect Strings

Expand Post »
Hello,
I am working on a login script for a personal site. The problem is though, I need to have the best and most secure protection there is for the login system I am creating (I will not go into specifics but the users will have access to very sensitive data). The users will each have a password and username. I need a way that is possible with all PHP installations (I am planning on using this script on other hosts for other sites and need something that can be easily installed without the need for any special functions not included in a normal PHP installation) to secure user passwords in the most secure way possible. I have other methods of security, but they are not for password encryption and more for validation of users. Currently now, I am just using md5() to encrypt the passwords. Could someone (that has a great deal of security experience) point me in the right direction for a very secure system. Any links to articles, code samples, or explanations will be greatly appreciated!!!
Thanks So Much Guys (And Girls)
FlashCreations
Reputation Points: 47
Solved Threads: 47
Posting Whiz
FlashCreations is offline Offline
393 posts
since Sep 2008
Jan 2nd, 2009
0

Re: The Most Secure Way Encrypt and Protect Strings

http://en.wikipedia.org/wiki/MD5
MD5 isn't really that safe anymore.

> I will not go into specifics but the users will have access to very sensitive data
Like banking or medical details?
Many countries have legal requirements for compliance (and such like).

> I need to have the best and most secure protection there is for the login system I am creating
That kind of 'best' comes with high price tags.
It's not something you're likely to be able to lash together yourself with a few bits of help from an online forum.
Team Colleague
Reputation Points: 5862
Solved Threads: 950
Posting Sage
Salem is offline Offline
7,164 posts
since Dec 2005
Jan 2nd, 2009
0

Re: The Most Secure Way Encrypt and Protect Strings

Exactly. All I'm looking for is the best that can be done with PHP.
Reputation Points: 47
Solved Threads: 47
Posting Whiz
FlashCreations is offline Offline
393 posts
since Sep 2008
Jan 2nd, 2009
0

Re: The Most Secure Way Encrypt and Protect Strings

Use a dynamic and static salt combination?
Article from codeigniter -- but the concept is the same.
Reputation Points: 70
Solved Threads: 15
Posting Whiz
kanaku is offline Offline
378 posts
since Jan 2007

This thread is solved

Either the thread starter or a moderator has marked this thread as solved. You can most likely trust the responses and answers given. There is most likely no reason for any further responses to be posted here. If you have a related question, please start a new thread in this forum instead.

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in PHP Forum Timeline: Hi I need to data search by php
Next Thread in PHP Forum Timeline: Future of PHP





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC