PHP password security - whats left? -

what use password security ?

being newbie @ (and coding in general), i've been looking @ sorts of different tutorials, articles etc. php , security concerning passwords. resulted in sorts of different solutions, when using mysql db , php. unfortunate things is, of these different articles , / or tutorials seem contradict 1 another. md5 fine "mainstream" user, others recommend sha1 or crypt(). now, far can see, crypt() seems "viable" solution. using md5 doesn't seem safe, having sorts of different online decryption sites. using sha1, salt, doesn't seem better. short demonstration given here:

http://www.youtube.com/watch?v=lrgmxh8wnz8

all of leads me question. best solution mysql driven forum site ? doesn't, in principle @ least, contain "personal information" (couldn't remember correct english term). necessary make ssl solution or......?

thank you.

everyone going tout bcrypt solid. prefer new php5 api password hashing function standard in php 5.5.

read here

it super easy , can tell super secure.

just set 60 length varchar in db , set

$hash = password_hash($password, password_bcrypt); 

and verify:

if (password_verify($password, $hash)) {     // password valid! } else {     // wrong password :( } 

since not hosting servers offer 5.5 can class here

as far ssl goes, recommended.