Search options (Page 2 of 2)

Double hashing take far more than two times the time to brute force, because instead of being able to do a dictionary based hack, you have to find a string of letters and numbers.  If the origional passoword was forums, it would be encrypted to 68daf8bdc8755fe8f4859024b3054fb8 the first time.  That could be broken in about 5 seconds using a dictionary brute force.  But if you run 68daf8bdc8755fe8f4859024b3054fb8 through md5 again, it gives you 471b357e0fdd976f770343b94a1e012c.  The effective time it would take to brute force that would be somewhat longer than your lifetime.  Random salt hashing would work well, to, but after you get one pass, wouldn't you have the salt for all the other passwords?

Then you would want to do something like where it takes the unix timestamp of the post, then does something like this:

$est_date = $old_date - $server_time - 5;

Very cool!

Will you make a normal readme install file?  My host doesn't allow SSH, and I have modified viewtopic and search files.