How to store passwords correctly?

Question

PHP

I enter through two fields Login and password. How to properly and securely store passwords in a database? md5+salt is still relevant or not? MySQL base.
If possible, then an example in php.
UPD:
I need to get a password from another language, before that I got a clean password by making a query to the DB, which is not secure. But if I will hash the password, for example, using password_hash() , then how can I get it in its purest form? Making a POST request somehow?

Answer 1

php.net/manual/ru/book.password.php
https://gist.github.com/nikic/3707231
habrahabr.ru/post/194972
store in the database as strings.

Answer 2

Ideally, neither the passwords themselves nor any key sequences need to be stored anywhere at all.
If possible, it is better not to store passwords in plain text.
And it is still acceptable to store not the password itself, but its one-way transformation (hash) with all sorts of payloads in the form of a "salt". The whole joke in this transformation is that there is no password itself. There is only some sequence of characters that cannot be converted back.
Thus, it all comes down to the fact that the password in its pure form was not transmitted over the network, but the results of the conversion were transmitted. As a result, when receiving on the server, for example, an authorization request, it is the converted follower that is checked. This is where the need for the action to recover clean passwords disappears.

Answer 3

You should state your purpose.
If it boils down to authentication, then storing the hash is really enough.
If your service acts as a data provider and authentication is performed by a third-party service, then you need to perform encryption. And then it would be better to shift the focus of the question aside how to ensure maximum storage security :)