DEV Community

Discussion on: What are the worst security practices you've ever witnessed?

Collapse
 
peter279k profile image
peter279k • Edited

This true story I've met recently.

When I took over the database tables generated by -x developers in 2017, I found that he used the MD5 hash to store user passwords.

Oh God! I want to tell him it has the security issue, but he said: Most of PHP web applications uses MD5 hash to store passwords in database tables.

I want to share the web sited called phptherightway, but he leaves our team and works for another company now.....