Re: encrypting passwords etc..

We had a client who wanted us to encrypt their passwords. Our argument was that maybe their database is not well protected. Only the dba and the application should have access to the database. No-one else should be able to view their data anyways. We didn't see any need to encrypt the passwords. Any thoughts... --- Hawk <hwk@barrysworld.com> wrote: > Ok I got it working now, with the update and > database connect etc.. thanks > guys :) > this is not a problem(yet), more a thought.. is it > really necesary to > encrypt passwords, I mean, what does it prevent, me > from seeing them using > mysql.exe ? :p > I tried and it worked fine to almost all points.. > worked with the user info > update and so on.. but I seem to do something wrong > and can't log back on > since I encrypted the password... :p > I used UPDATE users SET > password=password('$password') but by some reason I > can't seem to decrypt it on the login page.. any > help would again be > appreciated.. :) > > Hawk > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: > php-general-unsubscribe@lists.php.net > For additional commands, e-mail: > php-general-help@lists.php.net > To contact the list administrators, e-mail: > php-list-admin@lists.php.net > ===== Anas Mughal anasmughal@yahoo.com anasmughal@hotmail.com Tel: 973-249-6665 __________________________________________________ Do You Yahoo!? Send FREE video emails in Yahoo! Mail! http://promo.yahoo.com/videomail/