diff options
| author | Andrey Andreev <narf@devilix.net> | 2015-02-24 19:25:16 +0100 |
|---|---|---|
| committer | Andrey Andreev <narf@devilix.net> | 2015-02-24 19:25:16 +0100 |
| commit | f1ca865e0a7aea02061be5d59a49b2a222a27085 (patch) | |
| tree | 7cb4b81a99c38b03d714793be885ea853285b172 /user_guide_src/source/general/security.rst | |
| parent | abc8f00465beb4cb99cc533ab2dbf3cb4191cbbe (diff) | |
[ci skip] Add a note about pbkdf2 in security guide
Diffstat (limited to 'user_guide_src/source/general/security.rst')
| -rw-r--r-- | user_guide_src/source/general/security.rst | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/user_guide_src/source/general/security.rst b/user_guide_src/source/general/security.rst index 0c58f96b4..efc821f2b 100644 --- a/user_guide_src/source/general/security.rst +++ b/user_guide_src/source/general/security.rst @@ -133,6 +133,10 @@ with that. Please read below. provides them for you as long as you're running at least PHP version 5.3.7 (and if you don't meet that requirement - please, upgrade). + If you're one of the really unlucky people who can't even upgrade to a + more recent PHP version, use `hash_pbkdf() <http://php.net/hash_pbkdf2>`, + which we also provide in our compatibility layer. + - DO NOT ever display or send a password in plain-text format! Even to the password's owner, if you need a "Forgotten password" |