Encrypting Passwords

[Timby]

I might be in the wrong section, as this is more of a programming query, but I am curious as to how dangerous it is adding user names and passwords to a database and not encrypting them? As far as I can tell, the only real way to connect a database is by having control of the server anyway, and I think if the hacker is already on the server, the least of my problems is them getting my admin password to my forums or something.

Do I have the situation right? or am I missing something? I guess it is always safer to encrypt passwords though as opposed to not encrypting them.

[sat123]

yeah..we can use md5 or any hashing....they r provided in all prog. langs like php...and in database...

But database needs an user name and password and also privilages of doing certain task to be connected to so i don't think it might harm.