Http post?

I'm making a new site and implementing user registration

However, I'm wondering now whether the post method is safe enough to handle with passwords?
Can it be caught by some http sniffers or anything like that?

And, what are options to secure more passwords besides SSL which are paid I think ?


markzero

 

You can use standard encrypt/decrypt techniques for this which are hard to break.

If you use PHP, you can use the code specified in the following link.

Encrypt/Decrypt using PHP

 

Thanks for the tip!

Do you know maybe is it possible to collect POST data (a password) ?

 

use curl
thanks

 

After the post data is encrypted, it is not possible to collect password without decrypting the string using the same algo+key which is not easily possible.

 

make sure your using a password input as well.

 

HTTP is the most ubiquitous of the internet protocol..

 

Just hash your password with a combination of salt and you will be all right. See my article about it. http://www.ryantetek.com/2009/11/ho...more-secure-password-hashing-function-in-php/