yiisoft/yii — pull request #1768 by tom-- (2012-11-28 00:53:20+00:00)
Title: 999 improve md5 usages in guide

After discussion with @samdark, replaced md5 with crypt() and Blowfish hash in the Mos Def Guide, Blog Tutorial and Blog Demo. Added Wiki article 425 [Use crypt() for password storage](http://www.yiiframework.com/wiki/425) to explain how it works in detail.

The wiki has a section on availability of crypt(). My opinion is that if your PHP does not have the Blowfish option, or either of the iterated SHA options in crypt() (which probably means pre 5.3 on Windows) and if you can't install the Suhosin patch, then **you are boned**. Yii should keep well clear of any lib that claims to provide a portable solution. I haven't seen one that isn't flawed.

Finally, I think it might be a good idea if Yii Framework provided the `generateSale()` method. It's a good example of a missing PHP built-in that a framework can compensate for.