Question

$salt = uniqid();
   $crypt = md5($password , $salt);
   $new_pass = $crypt.':'.$salt;

In the database: ­ot÷„[ªà%Ûʼn¹:17b8bc731c322c9e05a26666458117f4

Is this a syntactical error? Or is the database not set up with the correct character formatting?

Answer 1

You enabled raw_output

PHP DOC

If the optional raw_output is set to TRUE, then the md5 digest is instead returned in raw binary format with a length of 16.

Change

$crypt = md5($password , $salt);
                       ^------ You moved the salt to raw_output 

To

$crypt = md5($password . $salt);
                       ^------ Should be this 

For security reasons i would not advice you to use md5 for password hashing. MD5 is so badly broken that it no longer takes so long to find an appropriate collision or reverse hash. Once broken, a hash algorithm only gets worse, never better therefore it would be better to choose an unbroken hash algorithm.

Standard

• sha1
• hash (sha256 & sha512)

Better Alternatives

• password_compat
• Portable PHP password hashing framework
• PBKDF2