In what scenario does a hacker get a table, but not PHP code?

Question

Ok, so I understand the value of salt in my hashed passwords ... sort of.

I set up a basic authentication scheme where I set passwords, and users are not able to set passwords as something that they can use for another site.

So what is the real usefulness of salt?

In what circumstances can someone compromise my user table but not access the rest of the tables with all the data or my PHP code that shows the magic?

I am trying to determine whether the use of salt is really important in my case.

thank

Answer 1

, SQL Injection load data infile. , , , . . , :

1) . , , .

2) . 8 . , , .

John The Ripper . . , bcrypt() FPGA GPU - . .

Answer 2

, . , , , Rainbow .

Answer 3

, , ASCII char , , 256 .

2 ASCII char 65536 .

, , , , . , , , . , , " " . , ( ,...), 30% . , , , , .

:

. .

Answer 4

( ) , ... ... . , / . , - , , - , , . , usertables, .

; , , , .

; , , PHP- . , PHP-, INSERT/UPDATE. SQL- , , INSERTING UPDATEing, , (, / ...).