Skip to main content

Timeline for Session Handling Setup

Current License: CC BY-SA 3.0

9 events
when toggle format what by license comment
Aug 3, 2015 at 22:34 answer added Der Kommissar timeline score: 5
Aug 3, 2015 at 21:50 answer added Ismael Miguel timeline score: 6
Aug 3, 2015 at 21:35 comment added Ismael Miguel To you, it is "simply". To me, it's a hole bigger than the blackhole in the middle of our galaxy. I sound like a mad guy, but I'm not. Your hash now is vulnerable to offline attacks (an attacker copies your hash and using offline methods like a GPU farm may crack your password). Security is no joke. Since you are asking for a code review (one of the points in the help section, which I assume you read on codereview.stackexchange.com/help/on-topic the point "Reviewers may comment on any part of the code"), I gave my view. And, honestly, your code is insecure. I'll write this in an answer.
Aug 3, 2015 at 21:28 comment added BadAtMaths Sorry to scare you @IsmaelMiguel, it is simply "password" hashed. The whole point of my post here was to receive advice on the security and usability of my method of working with sessions, rather than the storing of my passwords.
Aug 3, 2015 at 21:25 comment added Ismael Miguel I'm downvotting this due to it's high insecurity and low reliability. I'm sorry, but it is really insecure. I would never recommend someone using your code in it's current form. I recommend that you read security.stackexchange.com/questions/211/… before using this code in a production environment.
Aug 3, 2015 at 21:15 comment added Ismael Miguel Question: is 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 the hash of any important password? If it is, CHANGE IT NOW!
Aug 3, 2015 at 21:08 history edited Malachi CC BY-SA 3.0
removed tag from title, please show appreciation by upvoting good answers and accepting the best answer
Aug 3, 2015 at 21:05 review First posts
Aug 3, 2015 at 21:07
Aug 3, 2015 at 21:01 history asked BadAtMaths CC BY-SA 3.0