Comment on [S5 Slides] Security in Web ApplicationsComments−aidenn016y1) Don't use anything fast (like md5) to hash your passwords. Use many-rounds of md5 or sha-1, or use something specifically designed for password hashing like eksblowfish2) Don't escape your SQL, use parameterized queries
Comments
1) Don't use anything fast (like md5) to hash your passwords. Use many-rounds of md5 or sha-1, or use something specifically designed for password hashing like eksblowfish
2) Don't escape your SQL, use parameterized queries