Question

this is my code, it works, except for the passwords, how would I fix this? I know I should do something with md5 but I couldn’t get found solutions to work with my code. I really need to make this right and safe, please assist

                //get the posted values
    $username=htmlspecialchars($_POST['user_name'],ENT_QUOTES);
    $password=htmlspecialchars($_POST['password'],ENT_QUOTES);

    $check_for_username = $mysqli->query("SELECT username FROM q4jli_users WHERE username='$username' AND password=MD5('$password')"); 
    if (mysqli_num_rows($check_for_username)) {     
        echo "yes";  

    } else {
        echo "no";                                                                           
    }

Thanks in advance

Answer 1

MD5 is outdated and no longer a sufficient method of password encryption. You should investigate salted hashes using more modern encryption algorithims.

food for thought:
bcrypt