Any good tutorial on how to deal with passwords? In a site of mine I generate a salt with UUIDv4 and generate a sha512 of the passsword+salt and store both the salt and hash. When the user authenticates I regenerate the hash and check. This is good, right? I still don't know how to deal with cookies/sessions though. And have no idea how basic http auth works.
I'd search myself but I'm afraid to find a "bad" tutorial.
I'd search myself but I'm afraid to find a "bad" tutorial.