drbowen wrote on Monday, May 23, 2005:
login.php has the line (#4)
include_once("$srcdir/md5.js");
What are the dependencies of this line?
What does it do?
drbowen wrote on Monday, May 23, 2005:
login.php has the line (#4)
include_once("$srcdir/md5.js");
What are the dependencies of this line?
What does it do?
sunsetsystems wrote on Monday, May 23, 2005:
It appears to be the client-side JavaScript that hashes the login password before it’s sent to the server. This is to avoid sending passwords “in the clear” over the network.
In a production environment you’ll want to use HTTPS, in which case hashing the passwords seems irrelevant.
– Rod <rod at sunsetsystems dot com>