R1der Posted January 11, 2007 Share Posted January 11, 2007 ok i got a forgot password page what it does is thay type in there username and then it emails them there password.but the password is md5 in the database can you help me make it so it send them there password decrypted?[code$body = "Hello {$b['username']}! Your password for www.********.com is {$b['userpass']}. If you have any other problems please mail *****@********.com";[/codeThis si the part that needs help this part of the code is the body of the email you get with there password in itThx Quote Link to comment Share on other sites More sharing options...
taith Posted January 11, 2007 Share Posted January 11, 2007 no. there is no way (as of yet) to decrypt md5() Quote Link to comment Share on other sites More sharing options...
R1der Posted January 11, 2007 Author Share Posted January 11, 2007 Ah damn!Thx anyways for the reply Quote Link to comment Share on other sites More sharing options...
ToonMariner Posted January 11, 2007 Share Posted January 11, 2007 there never will be a decryption of md5 - if there is then md5 will no longer be an acceptable encryption algoritm.What R1er is looking for is the two encrytpion offered by the mcrypt library Quote Link to comment Share on other sites More sharing options...
taith Posted January 11, 2007 Share Posted January 11, 2007 lol... theres dozens of encriptions out there that have already cracked... its only a matter of time before md5() joins the ranks... it'll probably be a long long time... but its not impossible... Quote Link to comment Share on other sites More sharing options...
R1der Posted January 11, 2007 Author Share Posted January 11, 2007 Ok stop confusing me lolCan this be done or not? :P Quote Link to comment Share on other sites More sharing options...
taith Posted January 11, 2007 Share Posted January 11, 2007 no. not at the moment lol... and dont expect it for a long while... lol Quote Link to comment Share on other sites More sharing options...
R1der Posted January 11, 2007 Author Share Posted January 11, 2007 lol kk,Can anyone suggest another way i can do this?i want away my users can get there password if thay forget it. Quote Link to comment Share on other sites More sharing options...
ted_chou12 Posted January 11, 2007 Share Posted January 11, 2007 the only suggestion i have for you is to email them a new set of password, that would be the easiest way, or else you would have to change your password encrypt system, to something like rot13 or something...Tedbtw, if you want a random pass. generate script, i have one... Quote Link to comment Share on other sites More sharing options...
taith Posted January 11, 2007 Share Posted January 11, 2007 that does seem to be the easiest way of doing it... us a randomkeygen like...[code]function randomkeys($length){ $pattern = "1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"; for($i=0;$i<$length;$i++) $key .= $pattern{rand(0,62)}; return $key;}[/code]set that generated key to the database, and email it to them, and allow them to change it on the page... Quote Link to comment Share on other sites More sharing options...
Accurax Posted January 11, 2007 Share Posted January 11, 2007 [quote author=ToonMariner link=topic=121929.msg502193#msg502193 date=1168520577]there never will be a decryption of md5 - if there is then md5 will no longer be an acceptable encryption algoritm.What R1er is looking for is the two encrytpion offered by the mcrypt library[/quote]You could write a massive scriptto pass the MD5 through a program like Cain & Abel ... but i wouldnt bother tbh Quote Link to comment Share on other sites More sharing options...
Accurax Posted January 11, 2007 Share Posted January 11, 2007 [quote author=taith link=topic=121929.msg502203#msg502203 date=1168521497]no. not at the moment lol... and dont expect it for a long while... lol[/quote]MD5 is easy to crack... if you have the hash ... so is SHA1 for that matter Quote Link to comment Share on other sites More sharing options...
Accurax Posted January 11, 2007 Share Posted January 11, 2007 There are several free standing programs that can crack MD5 and SHA 1 .. Cain and abel is one, The other is jack the ripper or something like that.Whilst incorporating these programs into a php script is not really feasable... the simple fact that these programs contain algorithms capable of cracking md5 hash's means that it should at least be theoretically possible to do what your asking.That said I wouldnt like to try it myself. Quote Link to comment Share on other sites More sharing options...
emehrkay Posted January 11, 2007 Share Posted January 11, 2007 md5 has been hacked, move to sha1anyway, on your resend password page. change it to reset password and generate a password email it to them and md5 it to the database Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.