13.06.2014, 09:37
Quote:
Two reasons:
1) It is based on dini, which works by opening a file, reading it, and closing the file again for EVERY read and EVERY write. Most other INI systems do all their reads and writes with a single open/close, making them orders of magnitude faster. 2) Its password "encryption" is "udb_hash", which is an "Adler32" hash and NOT cryptographic. It is a 32bit hash, used for CRC and comparisons, not secure storage, because it can be cracked in literally milliseconds. In fact, if your password is more than 5 characters long it is actualy WORSE than just storing the plain-text password (and that is pretty bad to begin with). |