Help with user authentication

[carlg]

When I enter a new user into my database table that stores users, I put the password in the database kind of like this.

 

crypt($pwd)

 

When I try to verify the user, I do something like this

 

if (crypt($pwd_user_just_entered) == $pwd_from_database)
{
//user logged in OK
}
else 
{
//invalid login
}

 

I think I'm doing something wrong

 

Any help is appreciated

 

Thanks

 

[recklessgeneral]

Hi,

 

The manual page for crypt (http://www.php.net/manual/en/function.crypt.php) raises a few issues to be wary of with this function. I haven't used it myself - I favour the md5 function myself, which seems to work fine.

 

Cheers,

Darren.