[development] Re: [drupal-devel] Securing Login: MD5 password hashing using javascript

Moshe Weitzman weitzman at tejasa.com
Thu Nov 10 03:49:34 UTC 2005


can't you do all this stuff in settings.php today? for example

>   if (isset($_SESSION['protocol'])) {
>     $base_url =  $_SESSION['protocol']. '//example.com';
>   } else {
>     $base_url =  'http://example.com';
>   }

getting back to the topic, i'd love to see javascript hashing of  
password. this is used in phpmyadmin and many other projects.

keyloggers have nothing to do with this. do folks think they are  
being smart when they post 'but this won't stop a keylogger'? no  
shit. that sort of post only serves to derail an otherwise useful  
conversation. please resist the temptation.



More information about the development mailing list