codeguy/php-the-right-way

Worth mentioning for passwords

github-scx opened this issue · 0 comments

I think it would be worth mentioning the #[SensitiveParameter] they added. It will make it so that the variable doesn't get thrown in stack dumps, or log files internally to PHP. This is in 8.2, and I think it makes it a little more secure.

public function login(string $email, #[SensitiveParameter] string $password)
{
echo 'login';
}