php validate user password

From:	Michael Kubler	Date:	Mon, 09 Feb 2009 13:58:51 +0000
Subject:	php validate user password
References:	1 2	Groups:	php.general
Request:	Send a blank email to php-general+get-287954@lists.php.net to get a copy of this message

These days SHA should really be used instead of MD5, and you should be SALTing the password as well. Here's a great guide : http://phpsec.org/articles/2005/password-hashing.html Michael Kubler *G*rey *P*hoenix *P*roductions <http://www.greyphoenix.biz> Jan G.B. wrote:

2009/2/9 Andrew Williams <andrew4williams@gmail.com>:
Can some body help out on how to validate user password from the database?
    
There are several possibilities. This would be one. <? $query = 'SELECT 1 from usertable where name = ' . mysql_real_escape_string(STRIPPED_AND_TRIMMED_REQUEST_VAR_HERE)
      . ' AND pass = md5("' .
mysql_real_escape_string(STRIPPED_AND_TRIMMED_REQUEST_VAR_HERE) . '");'; ?>