login help

[chrismartz]

I was wondering how i can have my users register and save their password in SALT encryption. Then when they login, it will check with the encryption. I used Web Wiz forums and this is what they do in that. I would like to make the users added to the forum users so it can get usernames and such from one big database instead of two which don't read each other.

[simflex]

The notion of SALT encription was an idea with good intentions that really doesn't help anything

You can run your passwords through md5sum(), which is an open source
implementation, and thus seems to've been written in every language out
there. but a straight md5sum leaves you open to a dictionary attack.
So you want to do something like this:

salt = random_4_char_string;
encrypted_password = salt + md5sum(salt + cleartext_password);


You can go here to get more info about it:

http://cryptix.org/

As far as having one big database versus 2, are you talking about 2 tables?
If yes, it is really a good idea to have one table for username/password and another for something else.
You can then tie them together with one common key.
Hope this helps!