Loading ...
I tweeted a week or so ago: Please stop using mySQL’s password() function. I had good reason for doing so – the legacy software I’ve been assigned to maintain until I can help with the new rev has a password schema that is based entirely on mySQL’s password function as the hash strategy for storing user-account passwords in the database.
As developers, we should be getting that uncomfortable, squishy, feeling whenever we read about another corporate hack event, one that exposed gazillions of user accounts to the ether, and zomg, we even got their passwords!!!
