md5(md5($login_password) . $salt) in MySQL

[Sangheili]

Hello,

I unfortunately cannot use PHP to compare the plaintext password with the MD5 hash, I can only use mysql. The password needs to be placed into this format

md5(md5($login_password) . $salt)

and then compared, with the username, against the already hashed value in the database. I've been trying to do this but the hash value I get keeps being different from the one in the database.

I would really appreciate help!

[kh99]

I find that this works:

SELECT * FROM user WHERE md5(password) = md5(md5(CONCAT(md5('password'), salt))))

I added the extra md5() because otherwise I was getting this

#1267 - Illegal mix of collations (latin1_swedish_ci,IMPLICIT) and (utf8_general_ci,COERCIBLE) for operation '='

and I don't know why. This is my test server, so it could just be a problem with the way I have it configured.

Anyway, are you sure what you're using for $password is the plain text password? I ask because if you're using what comes from a vbulletin login form, it could be blank because it normally clears the plain text password field.