Re: Re: Format of Encrypted Password
| From: | Ray Hauge | Date: | Wed, 06 Sep 2006 14:44:38 +0000 |
| Subject: | Re: Re: Format of Encrypted Password | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-241416@lists.php.net to get a copy of this message | ||
On Wednesday 06 September 2006 04:02, Mourad Boulahboub wrote:
> Hi Kevin,
>
> Kevin Murphy schrieb am 06.09.2006 00:27:
> > $_SERVER['PHP_AUTH_PW']
>
> this is needed if you run HTTP-Authentication for e.g. .htaccess/.htpasswd
>
> i think you will find a string like
>
> Header("WWW-Authenticate: Basic
>
> in your scripts also.
> I think the passwords are stored in MD5
It is possible that it's MD5, but the field in MySQL is only a varchar(16).
I've seen things like that before... I've also been in a place where they
offloaded creating passwords to htpasswd.
I would suggest looking at the code where new accounts are created (if there
is code to do that). That should tell you what's going on.
--
Ray Hauge
Programmer/Systems Administrator
American Student Loan Services
www.americanstudentloan.com
1.800.575.1099