[wp-hackers] Password Handling Improvements - Trac Ticket #2870

Steve Lewis stevelle at gmail.com
Tue Sep 25 22:30:35 GMT 2007


On 9/25/07, Callum Macdonald <lists.automattic.com at callum-macdonald.com> wrote:
>
> I'd also be in favour of storing the passwords differently, adding a
> unique salt value with each user and storing the md5 of the password
> plus the salt. That would protect user accounts from rainbow attacks.
> Anyone else think it's worth the effort?

Better, allow the salt to be overridden in wp-config.php for those of
us who choose to.

-- 
SteveL


More information about the wp-hackers mailing list