Learn More
Resend Email
2
BurningSatan
7y

!Rant
If I'm validating a user input form should I use a hash or a encrypted string. I hope to include the user IP, header requested time plus a random number for the string.

undefined
Favorite
Ranter
Comments
  • 3
    7y
    Wat.
    Https for the transmission. User password should be have a salt added and then be hashed with a strong algorithm like bcrypt.
  • 1
    7y
    Im with kimmax in that a: wat, b: https for all secure transactions.
  • 2
    7y
    Yeah, if you're using https it's kinda overkill to hash data before transmission; banking sites that I've used don't even do that.

    It you're sending sensitive data without https, stop.
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment