Re: MD5...
| From: | Matt McClanahan | Date: | Tue, 05 Sep 2000 18:15:53 +0000 |
| Subject: | Re: MD5... | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-15342@lists.php.net to get a copy of this message | ||
On Tue, 5 Sep 2000, Juan M. Rodriguez wrote:
> Hi,
>
> I'd like to use MD5 to encrypt the pass in mysql. But, if i need see the
> password???
Then you're out of luck, md5 is a one-way algorithm. Typically to check
against an md5'd password you md5 a given value, and comparing it to the
md5'd password.
If you're planning on needing the password for telling it to users when
they forget it, a popular alternative is to leave the password
crypted/md5'd, and store a reminder or hint word in addition. Then when
the user forgets their password, you can send them the reminder/hint
instead of the password itself. (Or you could just reset their password
to something random and have them change it later)
Matt