EchoFool Posted January 26, 2008 Share Posted January 26, 2008 What is the advantages/disadvantages if any of using : $encrypt_password = md5($Password); From a user and a admin point of view? Also if I insert the encrypted password to the database does that mean in the login I have to do like $input = md5($password); Then check with a query with the encryption code or do you check with the original users input of numbers and letters? Sorry if I sound noobish here .. hope you can help Quote Link to comment Share on other sites More sharing options...
toplay Posted January 26, 2008 Share Posted January 26, 2008 The answer I would think is obvious, why. And yes you would have to do the same on input when using MD5() since it's one way type of encryption. Search these forums and code snippets, because encryption topics have been discussed a lot. Quote Link to comment Share on other sites More sharing options...
revraz Posted January 26, 2008 Share Posted January 26, 2008 Would you like to see your passwords stored in plain text or in a coded format in a database? Quote Link to comment Share on other sites More sharing options...
EchoFool Posted January 26, 2008 Author Share Posted January 26, 2008 Well the reason i mainly asked if a member managed to hack my site i may need to log on to their account... if their password was "V32&3242"$!" encryption then i can't log in to check it out. I would obviously only do such a thing on the most serious of hacking attempts. But then on the other hand i don't want hacker's accessing user's passwords for obvious reasons. So is there a way to de-crypt aswell ? Quote Link to comment Share on other sites More sharing options...
revraz Posted January 26, 2008 Share Posted January 26, 2008 No, that is the point of hashing. But you can change their password to something else. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.