maximum allowlable length of any database account password
| From: | babu | Date: | Thu, 21 Jul 2005 15:53:50 +0000 |
| Subject: | maximum allowlable length of any database account password | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-39965@lists.php.net to get a copy of this message | ||
Hi all,
I am using php as UI for creating database accounts(oracle,mssql) to users.when the users enters his
information like name, number etc i will generate a random string(password), and mail it to the
user.I will also make md5(random string) and create an account for the database for the user with
md5 password.
when the user tries to login he enters the random string for password, i collect it and apply md5
and check the database account authentication.
my problem is with the login check. i could see the user created in the database, but when he want
to connect to the database , it does not connect.
i have checked this entire process without using md5. it worked excellently.
i want to ask is it the problem of using md5, as it returns 32 bit strings. Does oracle or mssql
accept 32 bit strings as passwords.
the other thing is, is it a good idea to trim the obtained md5 string to some 10 bit for creating
and checking the database account.
Thanks
babu.
---------------------------------
Yahoo! Messenger NEW - crystal clear PC to PCcalling worldwide with voicemail