In the past few days lots of websites have been “hacked” here in my country. Lots of databases has leaked out on the net and a lot of user-accounts have been compromised.

It doesn’t matter how strong security you have, a dark-minded “hacker” with the proper skills and motivation will be able to break into your system sooner or later.

So, i suggest mem to use-more secure protection to enhance security of this beautiful CMS.

Each user has a unique salt, and the only thing stored in the DB is the password_hash!



And then when they login:


This prevents the passwords from beeing cracked by so called rainbow-tables. And it also give’s a damn strong password hash.

So please implement it if it isnt there in this CMS..

Thank you,

PS: if it is already implemented then, pardon me, this is just a suggestion.

:)

Hi

Probably those sites used to store their password without hashing it, but MemHT doesn't do that error