On Kavoir.com there's a new post that reminds you that hashing isn't enough anymore to protect your users and their passwords.
They offer a suggestion or two of what you can do to help lock things down a bit more.
The common practice is to hash the user password and store the hash string of the password in the database.
When the user tries to log in and supplies his password, it is used to generate a...
Post new comment