Timeline for Session Handling Setup
Current License: CC BY-SA 3.0
9 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Aug 3, 2015 at 22:34 | answer | added | Der Kommissar | timeline score: 5 | |
Aug 3, 2015 at 21:50 | answer | added | Ismael Miguel | timeline score: 6 | |
Aug 3, 2015 at 21:35 | comment | added | Ismael Miguel | To you, it is "simply". To me, it's a hole bigger than the blackhole in the middle of our galaxy. I sound like a mad guy, but I'm not. Your hash now is vulnerable to offline attacks (an attacker copies your hash and using offline methods like a GPU farm may crack your password). Security is no joke. Since you are asking for a code review (one of the points in the help section, which I assume you read on codereview.stackexchange.com/help/on-topic the point "Reviewers may comment on any part of the code"), I gave my view. And, honestly, your code is insecure. I'll write this in an answer. | |
Aug 3, 2015 at 21:28 | comment | added | BadAtMaths | Sorry to scare you @IsmaelMiguel, it is simply "password" hashed. The whole point of my post here was to receive advice on the security and usability of my method of working with sessions, rather than the storing of my passwords. | |
Aug 3, 2015 at 21:25 | comment | added | Ismael Miguel | I'm downvotting this due to it's high insecurity and low reliability. I'm sorry, but it is really insecure. I would never recommend someone using your code in it's current form. I recommend that you read security.stackexchange.com/questions/211/… before using this code in a production environment. | |
Aug 3, 2015 at 21:15 | comment | added | Ismael Miguel |
Question: is 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 the hash of any important password? If it is, CHANGE IT NOW!
|
|
Aug 3, 2015 at 21:08 | history | edited | Malachi | CC BY-SA 3.0 |
removed tag from title, please show appreciation by upvoting good answers and accepting the best answer
|
Aug 3, 2015 at 21:05 | review | First posts | |||
Aug 3, 2015 at 21:07 | |||||
Aug 3, 2015 at 21:01 | history | asked | BadAtMaths | CC BY-SA 3.0 |