Salt and passwords [duplicate]

Answer 1

1. Don't use MD5 as your hashing algorithm, use something more secure such as SHA256 or even bcrypt.

2. Definately salt the password, if someone did gain entry to your database they would not be able to reverse the passwords for common hashes or using techniques such as rainbow attacks.

http://michaelwright.me/php-password-storage

http://en.wikipedia.org/wiki/Bcrypt