What is the best method to store passwords in a MySQL database? Should I MD5 or SHA1 or BOTH?

What is the best practice for this?

I did some research on this some time ago, to find the most secure storing method. What I learned is that you should use an algorith called bcrypt. After much hassle, I found an php implemantation of the algorithm, here: http://openwall.com/phpass/

I'm not clear on all the details anymore. It was, as I said, some time ago :P
Good luck!

Sha1 is secure enough for most purposes. Personally I generate a salt (a random string of characters) for each user and use that salt to double hash the string:

PHP Code:

$salt; //the salt you generated for this user
$pass = $_POST['password'];
$hash = sha1( $salt . sha1($pass) ); 


Some people use a single salt for all of their users, others generate a salt for each user.