website development using php/mysql

Question

1.40/5 (3 votes)

See more:

I am developing a website where the user need to register. After registration he can got some facility extra.

at the time of registration only the user will provide their email id and password.

Is it mandatory to encrypt the password in mysql.
If i am not doing so, then what can happen?

if it is mandatory then suggest me the way.

Posted 21-Sep-12 5:43am

Sourav Sarkar-SS

Updated 21-Sep-12 5:44am

v3

Add a Solution

3 solutions

Solution 1

Well my friend, It is not mandatory but is safe approach to do so....... You can search php reference to find out the ways to do so. I had designed a website wherein I simply generated the md5 hash of the password supplied by the user and this way whenever I received the password entered by user at the time of login, I simply generated it's md5 hash and then, compare it with the hash already stored in the database. i guess it as simple as well as reliable method but I cannot say anything about applying it in the real world application as mine was only a test website that I created only for learning...

Hope it can help you.

Regards
Tushar Srivastava

Posted 21-Sep-12 5:51am

Er. Tushar Srivastava

Comments

[no name] 21-Sep-12 11:54am

its not sufficient.
I need yes/no answer of my question.
then why?

Er. Tushar Srivastava 21-Sep-12 11:59am

You only need answer in either Yes/No?
Well then I will certainly say YES...
And the reason for this is, that there are many dangerous guys out there who always tries to peep into your security and if they succeed, then they will get the list of all the users with the passwords as well, it can be dangerous for users of your website as well as for you :-( So, it's mandatory to use Encryption in real world application.

[no name] 21-Sep-12 12:15pm

ok thanks

Er. Tushar Srivastava 21-Sep-12 12:16pm

It's all right :-)

Solution 3

its not necessary to encrypt password but notice that not to put password in cookies or links and also not to show the password even to the owner , use password type only.

but its better to encrypt to safe the user info.

Posted 1-Mar-14 7:34am

mahsa shahi

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ) · Accepted Answer · 2012-09-21T06:04:00

Solution 2

Go through Why encrypt user passwords?[^].

It is not mandatory, but encrypted passwords will help the website to be free from Password cracking[^].

And Encrypting passwords with mySQL/PHP[^] will help you find different methods to do in PHP/mySQL.

Thanks...

Posted 21-Sep-12 6:04am

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ)

Comments

[no name] 21-Sep-12 12:15pm

ok thanks

Peter Leow 2-Mar-14 0:36am

Very comprehensive answer, +5.

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ) 2-Mar-14 10:37am

Thanks Peter. :)