Re: encrypting passwords etc..

"security is measured by the weakest link in the chain" so I would say that the database needs to be well protected and the password encrypted. py At 12:14 PM 1/17/2002 -0800, you wrote:

We had a client who wanted us to encrypt their passwords. Our argument was that maybe their database is not well protected. Only the dba and the application should have access to the database. No-one else should be able to view their data anyways. We didn't see any need to encrypt the passwords. Any thoughts... --- Hawk <hwk@barrysworld.com> wrote: Ok I got it working now, with the update and database connect etc.. thanks guys :) this is not a problem(yet), more a thought.. is it really necesary to encrypt passwords, I mean, what does it prevent, me from seeing them using mysql.exe ? :p I tried and it worked fine to almost all points.. worked with the user info update and so on.. but I seem to do something wrong and can't log back on since I encrypted the password... :p I used UPDATE users SET password=password('$password') but by some reason I can't seem to decrypt it on the login page.. any help would again be appreciated.. :) Hawk -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net ===== Anas Mughal anasmughal@yahoo.com anasmughal@hotmail.com Tel: 973-249-6665 __________________________________________________ Do You Yahoo!? Send FREE video emails in Yahoo! Mail! http://promo.yahoo.com/videomail/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net