Forbedre password på siden

Hej

det er sådan at jeg kunne godt tænke mig at få gjort sikkerhed bedre på min siden.

lige nu bruger jeg sha1, jeg kunne godt tænke mig at gøre det langt bedre end hvad det er lige nu.

Jeg synes sådan her at det var dårligt at gøre sådan her - Se her

This section covers another common password hashing misconception: wacky combinations of hash algorithms. It's easy to get carried away and try to combine different hash functions, hoping that the result will be more secure. In practice, though, there is very little benefit to doing it. All it does is create interoperability problems, and can sometimes even make the hashes less secure. Never try to invent your own crypto, always use a standard that has been designed by experts. Some will argue that using multiple hash functions makes the process of computing the hash slower, so cracking is slower, but there's a better way to make the cracking process slower as we'll see later.

Here are some examples of poor wacky hash functions I've seen suggested in forums on the internet.

 md5(sha1(password))
 md5(md5(salt) + md5(password))
 sha1(sha1(password))
 sha1(str_rot13(password + salt))
 md5(sha1(md5(md5(password) + sha1(password)) + md5(password)))

er det ikke bare tag crc32 - Det ser meget sikkert ud eller hvad?


Håber du kan hjælp mig frem til at jeg få gjort sådan mere sikker på password område.

Det må gerne være noget nemt kode altså gerne sådan noget jeg kan hente et stede

Jeg arbejder med database.