[SOLVED] quick question regarding a login script

[dazzclub]

 

Hi there,

 

i created a registration form that puts a username and password into a user table. i have put the password with the function SHA1.

 

When i create a login form would i then need to use this function aswell when i pass the password variable in the select query?

 

cheers

Darren

[waynew]

When the user attempts to log in, convert there attempted password to sha1 and then compare with the password in the database.

[dazzclub]

like this;

 

$sql = "SELECT user_id FROM users WHERE user_id = '$userId' AND password = SHA1('$password')";

 

 

[waynew]

Yep, or simply

 

$password = sha1($_POST['password']);

//followed by SQL

 

Other way is better however.

 

Oh, and clean the input with mysql_real_escape_string() as password login forms are often the first to be attacked.

[dazzclub]

cheers thanks for that...i will clean the input data dont worry about that.

 

thanks again.

 

regards

Dazzclub