EchoFool Posted January 26, 2008 Share Posted January 26, 2008 What is the advantages/disadvantages if any of using : $encrypt_password = md5($Password); From a user and a admin point of view? Also if I insert the encrypted password to the database does that mean in the login I have to do like $input = md5($password); Then check with a query with the encryption code or do you check with the original users input of numbers and letters? Sorry if I sound noobish here .. hope you can help Link to comment https://forums.phpfreaks.com/topic/87967-solved-password-encryption/ Share on other sites More sharing options...
toplay Posted January 26, 2008 Share Posted January 26, 2008 The answer I would think is obvious, why. And yes you would have to do the same on input when using MD5() since it's one way type of encryption. Search these forums and code snippets, because encryption topics have been discussed a lot. Link to comment https://forums.phpfreaks.com/topic/87967-solved-password-encryption/#findComment-450074 Share on other sites More sharing options...
revraz Posted January 26, 2008 Share Posted January 26, 2008 Would you like to see your passwords stored in plain text or in a coded format in a database? Link to comment https://forums.phpfreaks.com/topic/87967-solved-password-encryption/#findComment-450080 Share on other sites More sharing options...
EchoFool Posted January 26, 2008 Author Share Posted January 26, 2008 Well the reason i mainly asked if a member managed to hack my site i may need to log on to their account... if their password was "V32&3242"$!" encryption then i can't log in to check it out. I would obviously only do such a thing on the most serious of hacking attempts. But then on the other hand i don't want hacker's accessing user's passwords for obvious reasons. So is there a way to de-crypt aswell ? Link to comment https://forums.phpfreaks.com/topic/87967-solved-password-encryption/#findComment-450083 Share on other sites More sharing options...
revraz Posted January 26, 2008 Share Posted January 26, 2008 No, that is the point of hashing. But you can change their password to something else. Link to comment https://forums.phpfreaks.com/topic/87967-solved-password-encryption/#findComment-450100 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.