Home > Article > Backend Development > md5 combined with cryp=invincible password_PHP tutorial
md5 combined with cryp=invincible password_PHP tutorial
- WBOYOriginal
- 2016-07-13 17:36:54921browse
Because I like sql injection
I have tested many websites ASPHPHPJSP before and after
and found that they basically use the MD5 encryption algorithm
They all say that MD5 is irreversible and cannot be broken
MD5 is irreversible But it can be broken by violence
You only need to MD5 the commonly used passwords and put them in the database
Others only need to provide the MD5 password for database comparison to restore the password
Domestic www.cmd5.com Foreign www.xmd5.org
All provide online blasting
Have many webmasters been hacked? The biggest part is that the administrator password was leaked by SQL injection
and then went into the background to cause damage
I found that PHP's built-in function crypt is very good
With MD5, it is even more invincible
$pass = 123456;
echo "MD5 encryption".md5($pass)."
"; //Unsafe
echo "crypt encryption".crypt($pass)."< ; br & gt; "; // The more chaotic password will become
Echo" Crypt complex encryption ".crypt ($ pass, substr ($ pass, 0,2))." & lt; ";" //Still unhappy
echo "After invincible encryption".md5(crypt($pass,substr($pass,0,2)))."
"; // Now how do hackers break this password? ? ?
?>
The last password is still 32 bits. At first glance, I thought it was MD5 encryption.
But no matter how huge the other party’s MD5 HASH value is, several T of data cannot be cracked