note 61564 added to function.mt-rand
| From: | kbater at gmail dot com | Date: | Tue, 07 Feb 2006 02:13:40 +0000 |
| Subject: | note 61564 added to function.mt-rand | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-103149@lists.php.net to get a copy of this message | ||
personally, for password protection, i use the md5 encryption method. It's especially good, so
that if someone hacks into your database, they can't get view peoples passwords to thier
accounts.... other than the fact that they will see and be able to change everything without knowing
thier password, but if you're a host, it's a good idea to use the md5 encryption.
example:
<?php
mysql_connect('localhost', 'user', 'pass') or die('Cannot
connect to mySQL Database. '.mysql_error());
mysql_select_db('db') or die('Cannot select mySQL Database. '.mysql_error());
if ($_POST['submit']) { // if the submit button has been pressed...
$query = "SELECT * FROM
users WHERE user =
'$_POST[username]' LIMIT 1";
$result = mysql_query($query) or die('Cannot preform mySQL query on database.
'.$mysql_error());
$rows = mysql_num_rows($result); //check to see if username is in database
$fetch = mysql_fetch_array($result); // Get the info out of the database
if ($rows = 0) { // if there is no username:
die('No such username or password is incorrect.');
}
else if (!$_POST['password'] = md5($fetch['password'])) { // if the password
is not the same as the md5 encryption of the password:
die('No such username or password is incorrect.');
}
else {
echo 'Successfully logged in! <a
href="nextpage.php">Continue!</a>';
}
}
else {
login();
}
?>
now, all you need to add to your other script that puts the info into the database for you is:
<?
// rest of your code before the insert
$password = md5($_POST['password']);
$query = "INSERT INTO blah blah blah..."
// rest of your code
?>
IT'S SO MUCH SAFER TO USE ON ANY SITE!!!!!!!!!!!
p.s. since the rest of the post's were about creating random passwords, just use this on like,
3 random letters, and you'll get like 8 or something, depending on the letters, so it's
totally un-encryptable unless they know it's a md5 encrytpion
any questions, e-mail me!
----
Server IP: 216.194.113.175
Probable Submitter: 65.37.12.19
----
Manual Page -- http://www.php.net/manual/en/function.mt-rand.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+61564
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+61564&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+61564&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+61564&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+61564&report=yes&reason=useless
Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+61564&report=yes&reason=non-english
Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+61564&report=yes&reason=already+in+docs
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+61564&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+61564&report=yes
Search -- http://master.php.net/manage/user-notes.php