How can I protect password on PHP Symfony form

Question

I have simple sign in form in my project on PHP Symfony. But I found this problem.

when I will use this command

$("#signin_password").val()

in Chrome it shows me password not secured.

How can I to protect user password in this way?

Answer 1

The best idea is to never show a raw password on the page. What's more, you should never store a raw password in a database or in any other medium.

The best method is to use one-way encryption to store all passwords, and in order to check a password, you would simply compare the "encypted string" to what is stored in the database.

Because you are using symfony 1.4, I'd suggest checking out the sfGuardPlugin for a ready-made solution.