Editing Salt (cryptography) (section)

==Web-application implementations==
It is common for a web application to store in a database the hash value of a user's password. Without a salt, a successful [[SQL injection]] attack may yield easily crackable passwords. Because many users re-use passwords for multiple sites, the use of a salt is an important component of overall [[web application security]].<ref>{{cite web |url=http://www.dshield.org/diary.html?storyid=11110 |title=ISC Diary – Hashing Passwords |publisher=Dshield.org |access-date=2011-10-15}}</ref> Some additional references for using a salt to secure password hashes in specific languages or libraries (PHP, the .NET libraries, etc.) can be found in the [[#External links|external links]] section below.