RE: [PHP] How can I decrypt a password I previously coded with md5()?

Exactly. The point of MD5 is that there is no way to get the password back. This makes things much more secure if your site gets hacked. Matthew Walker Ecommerce Project Manager Mountain Top Herbs -----Original Message----- From: Demitrious S. Kelly [mailto:apokalyptik@apokalyptik.com] Sent: Wednesday, January 30, 2002 3:03 PM To: 'Jason G.'; php-general@lists.php.net Subject: RE: [PHP] How can I decrypt a password I previously coded with md5()? You don't. md5 is one way encryption -----Original Message----- From: Jason G. [mailto:blair@nb.net] Sent: Wednesday, January 30, 2002 2:06 PM To: Nicolas Costes; Jose; php-general@lists.php.net Subject: Re: [PHP] How can I decrypt a password I previously coded with md5()? Hi Nicolas, I would be interested in seeing the javascript md5 function if possible. Thanks, Jason Garber IonZoft.com At 11:18 AM 1/30/2002 +0100, Nicolas Costes wrote: >As already said here, you cannot reverse the md5() function ... >So : > > -The user fills a login box (login, password) > -The PHP script 'crypts' this password with md5(); > -The already-encrypted password in the database (or the passwd > file) is > compared with the one provided by the user (and encrypted by PHP) > : if they > aren't the same ... Bye !!! > >And for more security, I use a JavaScript MD5 function to encrypt the >provided password in the user's browser so it goes already encrypted on the >net ... Then PHP's just got to compare it with the one in the database !!! > > >Le Mercredi 30 Janvier 2002 10:51, Jose a écrit : > > I'm making a proyect in php, and I have some doubts about the md5. > > I encript a password with it, but I don't know how to decrypt it again. > > > > Thanks. > > > > > > ------------------------------------------------------------------------ --- > >- ------------------ > > Jose Fco. ( josefgaNOSPAM@olinet.es ). > > OLINET, S.L. Teléfono: 952207135 - Fax: 952207600 > > Avda. Juan Sebastián Elcano, 39-41. 29017 Málaga. > > ------------------------------------------------------------------------ --- > >- ------------------ > >-- > ( °> Nicolas Costes > //\\ IUT de La Roche / Yon >/ \/ ) Nicolas.costes@Laroche.univ-nantes.fr >`-<< http://luxregina.free.fr > >-- >PHP General Mailing List (http://www.php.net/) >To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net >For additional commands, e-mail: php-general-help@lists.php.net >To contact the list administrators, e-mail: php-list-admin@lists.php.net -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.317 / Virus Database: 176 - Release Date: 1/21/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.317 / Virus Database: 176 - Release Date: 1/21/2002