如何在coldfusion中将密码作为Hash插入Ms SQL？

Question

我正在创建一个保存用户注册的表单.我想将密码作为哈希或md5插入数据库.

这是我的html表单,只有很少的coldfusion代码:

        <form id="myForm" class="ui form segment" method="post" action="registeraction.cfm">
      <p>Let's go ahead and get you signed up.</p>

      <div class="field">
        <div class="field">
        <label>Name</label>
        <input  placeholder="Name" name="name" type="text">
        </div>
      </div>

      <div class="field">
        <div class="field">
        <label>Email</label>
        <input  placeholder="Email" name="email" type="email">
        </div>
      </div>

      <div class="field">
        <div class="field">
        <label>Password</label>
        <input  placeholder="Password" name="password" type="password">
        </div>
      </div>


      <input class="ui blue submit button" type="Submit" value="Submit">
    </form>

这是registeraction.cfm中的代码:

<!--- Insert the new record ---> 
<cfinsert datasource="mydatasource" tablename="Users"> 

<h1>User Added</h1> 
<cfoutput> You have added #Form.name# #Form.email# to the testdb database. 
</cfoutput> 

Answer 1

你应该避免使用MD5,它被认为是一种弱算法.请参阅: MD5作为密码散列函数有多弱？

此外,您不应该只是哈希密码,您应该将纯文本密码与盐结合使用.有关详细信息,请参阅:OWASP:密码存储备忘单