search

kieranhogg / yuop-cms

A really simple CMS
GNU General Public License v3.0
0 stars 0 forks source link

MD5 #1

Open kieranhogg opened 8 years ago

kieranhogg commented 8 years ago

Having been all the range when it was written, it should probably use another hashing method other than MD5 for the password.

MarkRijckenberg commented 7 years ago

I suggest reading this:

https://en.wikipedia.org/wiki/Secure_Hash_Algorithms

MD5, SHA-0 and SHA1 are all vulnerable to collision attacks.

So if you need to hash, I suggest replacing md5 with sha256 or sha512.

Regards,

Mark Rijckenberg