title: Static Salt vs Random Salt - Security PHP
body: <p>Is there any working difference between</p>
  
  <pre><code>$hash=sha1($key.$staticSalt);  
  </code></pre>
  
  <p>and</p>
  
  <pre><code>$hash=sha1($key.$randomSalt);  
  </code></pre>
  
  <p>If i use random salt i need to store the random salt in the database, on the other side if i use a fixed salt then no need to use DB !<br>
  And if the code can be hacked to see the salt (static) then the hacker will be able to see the database also with the hash and random salt :D<br>
  So does it worth it ?<br>
  What if i use a salt like <code>@#kiss~89+.&amp;&amp;^me</code> ?</p>