RE: [PHP] Password checking
| From: | o dot cook at etoncollege dot org dot uk | Date: | Tue, 05 Sep 2000 14:59:53 +0000 |
| Subject: | RE: [PHP] Password checking | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-15306@lists.php.net to get a copy of this message | ||
Sorry - that $sql line should have been:
$sql = "SELECT username, password, PASSWORD('$password') AS form_pass_enc
FROM user WHERE user='$username'";
--------------------------------------------
Ollie Cook +44 (7946) 057 198
Programmer, Admin XCalibre Communications
PGP: http://ollie.zenox.dhs.org/pgp-key
--------------------------------------------
> -----Original Message-----
> From: o.cook@etoncollege.org.uk [mailto:o.cook@etoncollege.org.uk]
> Sent: 05 September 2000 15:57
> To: Chua@mail.interclean.com
> Cc: php-general@lists.php.net
> Subject: RE: [PHP] Password checking
>
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> try:
>
> $sql = "SELECT username, password, PASSWD('$password') AS
> form_pass_enc
> FROM table WHERE user='$username'"
> $result = mysql_query($sql,$db);
> $row = mysql_fetch_array($result);
>
> and test to see if $row['password'] and $row['form_pass_enc']
> are the same.
>
> Ollie
>
> - --------------------------------------------
> Ollie Cook +44 (7946) 057 198
> Programmer, Admin XCalibre Communications
> PGP: http://ollie.zenox.dhs.org/pgp-key
> #define QUESTION ((bb) || !(bb))
> - --------------------------------------------
>
> > -----Original Message-----
> > From: Wee Chua [mailto:Chua@mail.interclean.com]
> > Sent: 05 September 2000 15:36
> > To: 'Krznaric Michael'; PHP (E-mail)
> > Subject: RE: [PHP] Password checking
> >
> >
> > Hi all,
> > I was wrong, the problem is still exist. The output of the passwords
> > different from the statement below, the first password from
> > Mysql display on
> > the screen is encrypted password, the second password is the
> > password what I
> > enter. How could I make it work? Please help? Thanks.
> >
> > -----Original Message-----
> > From: Krznaric Michael [mailto:mkrznaric@rand.com]
> > Sent: Tuesday, September 05, 2000 10:27 AM
> > To: 'Wee Chua'; Krznaric Michael; PHP (E-mail)
> > Subject: RE: [PHP] Password checking
> >
> >
> > Take it step by step;
> >
> > print "Row -> User: ".$row["user"]."<BR>";
> > print "Row -> Password: ".$row["password"]."<BR>";
> > print "Username: $username<BR>";
> > print "Password: $password<BR>";
> >
> > then if everything seems o.k. do the following,
> >
> > //This should either be true or false
> > print "First Equality: ".
> > $row["user"]==$username."<BR>";
> > print "Second Equality: ".$row["password"]) ==
> > $password."<BR>";
> > print "Third Equality: ".$username !=""."<BR>";
> >
> > So each one of those should be true. Concentrate on the false one.
> >
> > Mike
> >
> > if (($row["user"] == $username) and (($row["password"]) ==
> > $password) and
> > > ($username !=""))
> >
> > -----Original Message-----
> > From: Wee Chua [mailto:Chua@mail.interclean.com]
> > Sent: Tuesday, September 05, 2000 10:03 AM
> > To: 'Krznaric Michael'; PHP (E-mail)
> > Subject: RE: [PHP] Password checking
> >
> >
> > Yes, I tried everything from what Julie suggested me to
> change on the
> > statement.
> >
> > -----Original Message-----
> > From: Krznaric Michael [mailto:mkrznaric@rand.com]
> > Sent: Tuesday, September 05, 2000 10:15 AM
> > To: 'Wee Chua'; 'julie@thickbook.com'; PHP (E-mail)
> > Subject: RE: [PHP] Password checking
> >
> >
> > Did you try using && instead of "and"?
> >
> > Mike
> >
> > -----Original Message-----
> > From: Wee Chua [mailto:Chua@mail.interclean.com]
> > Sent: Tuesday, September 05, 2000 9:51 AM
> > To: 'julie@thickbook.com'; MySQL (E-mail); PHP (E-mail)
> > Subject: RE: [PHP] Password checking
> >
> >
> > Hi Julie and all,
> > I tried your solution but it is still not working. I tried to
> > take away
> > ($row["password"] == "$password") and rest works fine. I
> > don't what is
> > wrong with my ($row["password"] == "$password") statement,
> > please help!
> > Thanks in advance.
> >
> > Calvin
> >
> > -----Original Message-----
> > From: Julie Meloni [mailto:julie@thickbook.com]
> > Sent: Tuesday, September 05, 2000 9:59 AM
> > To: Wee Chua
> > Cc: MySQL (E-mail); PHP (E-mail)
> > Subject: Re: [PHP] Password checking
> >
> >
> >
> > > if (($row["user"] == $username) and (($row["password"]) ==
> > $password) and
> > > ($username !=""))
> >
> > Try:
> >
> > if (($row["user"] == "$username") &&
> > ($row["password"] ==
> > "$password")
> > && ($username != ""))
> >
> >
> > - julie
> >
> > +------------------------------------------------+
> > | Julie Meloni (jcm@i2ii.com) |
> > | Tech. Director, i2i Interactive (www.i2ii.com) |
> > | |
> > | "PHP Essentials" & "PHP Fast & Easy" |
> > | http://www.thickbook.com/ |
> > +------------------------------------------------+
> >
> >
> > --
> >
> ---------------------------------------------------------------------
> > Please check
> > "http://www.mysql.com/php/manual.php" before
> > posting. To request this thread, e-mail
> > mysql-thread49757@lists.mysql.com
> >
> > To unsubscribe, send a message to:
> > <mysql-unsubscribe-Chua=mail.interclean.com@lists.mysql.com>
> >
> > If you have a broken mail client that cannot send a message
> > to the above
> > address(Microsoft Outlook), you can use
> > http://lists.mysql.com/php/unsubscribe.php
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> > For additional commands, e-mail: php-general-help@lists.php.net
> > To contact the list administrators, e-mail:
> > php-list-admin@lists.php.net
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> > For additional commands, e-mail: php-general-help@lists.php.net
> > To contact the list administrators, e-mail:
> > php-list-admin@lists.php.net
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> > For additional commands, e-mail: php-general-help@lists.php.net
> > To contact the list administrators, e-mail:
> > php-list-admin@lists.php.net
> >
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGPfreeware 6.5.8 for non-commercial use
> <http://www.pgp.com>
>
> iQA/AwUBObUJosPaWaNT0pVnEQLFMgCdF2P8nh/PJgkEBV1XSIxpp+KWfuUAn2vy
> mKfOGKqzKNBRrvjnJUVFXsjM
> =p8uF
> -----END PGP SIGNATURE-----
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> For additional commands, e-mail: php-general-help@lists.php.net
> To contact the list administrators, e-mail:
> php-list-admin@lists.php.net
>