我应该在使用AJAX发送时散列密码吗？

Question

I'm really confused with hashing password when sending via ajax and sanitizing and validating the login in php.

Should I hash passwords before sending it via ajax?If I do what about sanitizing and validating hashed-password and storing another hash of ajax submitted hashed-password in database?
I know hashing a javascript hashed-password doesn't make any sense here.

Anyone can tell what is the best practice for sending passwords via ajax and sanitizing/validating in php.

Answer 1

The common approach is to send the passwords as plain text to the server (making an AJAX call, in your case) and then in server make the hashing, before you hit the database either for creating a new user of checking if the inserted password is the correct one.