How secure would this be? PHP?

Question

How secure would this be? If i put all of the information into my password protected database all md5 encrypted. What would the chances be of this been hacked e.g. people changing information on the database.

Answer 1

The MD5 will keep things reasonably secure from people who have access to the local network on which the database server resides (which is the main reason for encrypting the password).

HOWEVER... unless you're using a secure socket layer (SSL) to connect via HTTPS (not HTTP), any time somebody logs into your site, the password gets sent along the web as PLAIN TEXT and so is completely open to packet sniffers.

HTTPS (when the browser displays that key or lock icon (depending on brand) is the only real way to secure a web connection. You have to either go to an authentication authority yourself, or sometimes your web hosting company will do it for you.

Answer 2

Hmm... depense on the amount of information you will give out to the user...

As you know, md5 is not an unbreakable algorythm. So its not solid for passing unenchrypted information directly from a browser.

Security will have to be raised in other ways, by security log of login attempts etc. Only by checking the combination of two elements will help raise security level.

And then you face problems with reversibility. MD5 is fine for encrypting, but rather ressource hugging to decrypt. So if you literally intend to md5 encrypt it all, getting usable information will be rather hard.

Answer 3

dont give the link to anyone, and no one will hack it.

Answer 4

You should be OK