I have a login form that will submit id and password to a php file which will then check that id and pw against data in an SQL database. How can i encrypt the outgoing form data to make sure nobody can see it until it gets to its destination?
the login form code is
<html>
<head>
<title>
Login page
</title>
</head>
<body>
<form name="login" action="fetchalldata.php" method="post">
Username : <input type="text" name="userid"/>
Password : <input type="password" name="pswrd"/>
<input type="button" name="submit" value="Login"/>
</body>
</html>
would prehashing the password on the database and
sending a hashed password be more effective?
SSL is the answer. The only answer.
However, if you must try go go with a home brew solution here is an idea to consider:
This is still a lousy idea, but it isn’t as lousy as sending plain text passwords.
Use SSL. Really.