I'm beginning the developing of an online RPG using C# and GMS2. Since users will store sensitive information on a database I have a few questions I would like to ask the community.
- Does GML have a built in CSPRNG? - On that note, why is it not recommended to use a regular random number generator (such as
- Does GML have any password hashing functions, or will I have to develop an extension?
- What about the database side of things? Where would I store usernames, hashes and salts? How will I interact with it using GML?
- I've read not to use fast cryptographic hash functions such as MD5 and SHA1 - but, if the passwords are hashed and salted correctly, why would this be of any concern? Aren't things like brute force attacks take care of with CAPTCHAs?