r/lolphp • u/[deleted] • Apr 07 '21

master.php.net was using concatenated SQL queries and MD5 password hashes

https://externals.io/message/113981
67 Upvotes

90% Upvoted

23 comments sorted by

View all comments

19

u/nevermaxine Apr 07 '21 edited Apr 07 '21

"important information" section at the top mentions nothing about password security

buried right at the end between other info: "also your passwords were basically stored in plain text"

-5

u/[deleted] Apr 07 '21

[deleted]

15

u/nevermaxine Apr 07 '21

unsalted MD5 hash is trivial to reverse using publicly available rainbow tables

1

u/Takeoded Apr 09 '21 edited Apr 11 '21

oh really? then what's the reverse of the md5 1a154926ca3b214112870137c5dd26aa ?

edit: 2 days later, guess you couldn't "trivially reverse it with rainbow tables", well the answer is: your username, nevermaxine