Password Encription

[CWeaver]

I've seen this recommended many times:

$EncryptedPassword2 = md5($password);

But doesn't all php run on the server? So what's the point since you're sending the password to the server and the server is encrypting it then processing a query with it? Seems like it should be encrypted on the client then sent to the server. Is there a way of doing so? Is there a point to encrypting it on the server?

[Jack McKalling]

Passwords that are sent to the MySQL server (the database, if present), then they could get encrypted by SQL. In PHP, I don't know sorryExample:

INSERT INTO table VALUES ('$username',password('$password'))

Edited December 14, 2005 by Dan The Prof