[Banditukas]

Why need hash password?

[Affan]

"We hash passwords to prevent an attacker with read-only access from escalating to higher power levels."

[Banditukas]

It'is possible that attackers can read information from database?

[zT KiNgKoNg]

Quote:

Originally Posted by ****** Attackers aren't the problem - server owners are. They ALREADY have database access, and THEY should not be able to read passwords either. In short: DO NOT try write your own secure user system.

True, along with the possibility of creating a salt (sort-to-say) on a daily basis (possibly every 2/4 hours) to secure that password even more (Using the registration date or a unixtimestamp method to find the string in a database, ect)