Android Question B4A, JRDC2 and PHP Website

[asmondien]

Hi All,

Hopefully this is in the right section -

I'm working on a B4A app, that uses b4j server with jrdc2 connector to mysql server (this is all working fine) - I then have my friend work on php website, which he's connecting to the same mySQL server.

I would like to get a login/register system in place and keeping security I would need the password to be encrypted - I have found multiple posts here to get encryption working and I can save that in mySQL. So my question would be - what would be the best encryption method so both platforms(b4a, php) can read encrypt the password?

Thank you

 

[Revisable5987]

I will leave someone else to answer the 'best' method in terms of security.

However, I use DonManfred's BCrypt Libraries (B4J & B4A) and find it to be very good.
(it seems to work with PHP too)
https://www.b4x.com/android/forum/threads/bcrypt-create-salted-hashes-compatible-with-php.110180/

 

[Erel]

Configure the server to run over SSL and all the data will be encrypted for you.

 

[asmondien]

Thank you for your response -

I plan on to get SSL once this is live, but i didn't want to get a cert for dev stage.

I will look into the bcrypt.