php post password routines?
encryption, passwords, php
Solution
Check the HTTPS protocol
Hypertext Transfer Protocol Secure (HTTPS) is a combination of the Hypertext Transfer Protocol with the SSL/TLS protocol to provide encryption and secure identification of the server. HTTPS connections are often used for payment transactions on the World Wide Web and for sensitive transactions in corporate information systems. HTTPS should not be confused with Secure HTTP (S-HTTP) specified in RFC 2660.
If you cannot enable HTTPS for your site and don't want to post cleartext passwords (for obvious security reasons), consider using Challenge-Response Authentication.
Just google for various PHP/Javascript implementations and pick one you like.
Problem
I am very interested to find out how to keep php passwords secure. Main question is: How do I post the password as a secured string from the login form? I have been checking how other sites do this e.g. facebook. When I log in to facebook I dont see my password posted at all, it just seems like a long encrypted string. How do I convert the password field to an encrypted string before posting? Is this done with ajax? Cheers Ke