This repository was archived by the owner on Nov 27, 2019. It is now read-only.
This repository was archived by the owner on Nov 27, 2019. It is now read-only.
Re-encrypt password on server-side #3
Description
The salted sha512 on the client-side is nice, but in the case of a database breach, it would do very little against a dictionary attack. We should use bcrypt or similar (probably PHP's password_hash()) on the server-side after the client-side hashing to avoid having easily broken hashes persist in the database.