Fw: [PHP-DB] MySQL encryption

----- Original Message ----- From: "Scott Barron (by way of bryan)" <kain@dynup.net> To: <php-db@lists.php.net> Sent: Wednesday, October 18, 2000 3:00 PM Subject: Re: [PHP-DB] MySQL encryption > Oh, ok. > Thanks for the help! What I meant by "hashing" out the passwords was > actually using md5('pass') in the database. For some reason, I thought > this would make my passwords # out. eg (password = bryan, password = #####) > I am just doing this for security between me (the site admin) and the > client who wants me to mess with the db. > > Thanks for the help! > Bryan > > >>bryan wrote: > > > > > Hey everyone.. > > > > I ask a ton of questions on here, and thanks for the help and patience from > > everyone. > > > > Anyhow, I am trying to Encrypt a password for my end users. I have done so > > in the MySQL db, by simply going ... PASSWD('mypass'), but it returns > > something such as "3afi4004idgv", and my original never works. > > > > In order to compare a string with the output of PASSWORD you must also > run > it through PASSWORD, example: SELECT PASSWORD('foo') and compare that > value > with the encoded value thats in your database. I think that's what > you're trying > to do, if not please clarify. (Note: PASSWORD() does not use UNIX > crypt(3) but > ENCRYPT() will, if available.) > > > Is there a way that i could "hash #" out the passwords instead of making a > > boggus number? Or should I not even care about the database, and simply > > ENCRYPT the passwords using PHP? > > I'm not sure what you mean by this. PHP has a crypt() that is > equivalent to > UNIX crypt(3) (and MySQL's ENCRYPT()) if you wanted to go that route, > but normally > I just use PASSWORD. > > -Scott > > > > > Thanks! > > bryan > > > > -- > > PHP Database Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-db-unsubscribe@lists.php.net > > For additional commands, e-mail: php-db-help@lists.php.net > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > -- > -------------------------------------------------------------------------- ----- > "That's a deer shooting hat." > "Like hell it is. This is a people shooting hat. I shoot people in > this hat." > > > > -- > PHP Database Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-db-unsubscribe@lists.php.net > For additional commands, e-mail: php-db-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >