22.04.2018, 20:46
If they have access to your database or user files, in which the hashed password and salt is located, why do they need the password for then?
In that same database, it holds your money, score, kills, ...
They could easily delete all player's money, score, ...
Or they could set their money value to 2 billion.
Or set their admin-level to maximum to have admin privileges upon logging in with their own account.
Or wipe your entire database.
Hashing passwords doesn't make it safe if they have access to your entire database.
Why would they run a script for days/weeks/months to crack a password when all other data is exposed at the same time?
In that same database, it holds your money, score, kills, ...
They could easily delete all player's money, score, ...
Or they could set their money value to 2 billion.
Or set their admin-level to maximum to have admin privileges upon logging in with their own account.
Or wipe your entire database.
Hashing passwords doesn't make it safe if they have access to your entire database.
Why would they run a script for days/weeks/months to crack a password when all other data is exposed at the same time?