Painful Install on Windows

drbowen wrote on Monday, May 23, 2005:

login.php has the line (#4)

include_once("$srcdir/md5.js");

What are the dependencies of this line?

What does it do?

sunsetsystems wrote on Monday, May 23, 2005:

It appears to be the client-side JavaScript that hashes the login password before it’s sent to the server.  This is to avoid sending passwords “in the clear” over the network.

In a production environment you’ll want to use HTTPS, in which case hashing the passwords seems irrelevant.

– Rod <rod at sunsetsystems dot com>