This question already has an answer here:
I am a university student and I have only now reached the part of my degree where we focus on security. The task was very broad in how we were to protect our database and user details. All it said was "you need to store the user's passwords in hashed form.".
I am now wondering if I should perform the hash client side (JS) then send the hashed data to the server to be stored in the database or if I send the password in plain text to the server and hash the data server side (PHP) before storing. I am using the HTTP POST request for both scenarios. (I am under the impression that if you use a POST request, users/attackers cannot access parameters being sent to the server. Is this right?)
On another note, what would be a good hashing algorithm to use in my situation?