bbpassword Query

[digitalstudio]

Hi.

I need to write a query that takes the value of the "bbpassword" cookie and checks it against the user table "password" field.

The query will look something like this:

PHP Code:

$stmt = "SELECT user.`userid` 
         FROM `user` 
         WHERE `password` = '" . md5($_COOKIE['bbpassword'])  . "' "; 


My question is: Which functions do I need to run of the bbpassword cookie value to check it against the password field? As I'm pretty sure md5() isn't the only one!

Thanks.

[TigerC10]

The cookie password is:

PHP Code:

md5(md5(md5($password) . $salt) . $license) 


The password hash in the user table is:

PHP Code:

md5(md5($password) . $salt) 


It is not possible to "undo" a hash. You cannot search for passwords in the database like this. In order to do what you want, you'll have to select password from the database - and then run a while loop that hashes the values out and then compares with the cookie data.

PHP Code:

$passes = $db->query_read("SELECT password FROM ". TABLE_PREFIX ."user");
while( $user = $db->fetch_array($passes) )
{
     if( md5( $user[password] . $license ) == $_COOKIE['bbpassword'] )
     {
          //Do something that you want to do when the password matches
          break;
     }
} 


This is terribly inefficient, I wouldn't do it if I were you.

[digitalstudio]

Originally Posted by TigerC10

PHP Code:

$passes = $db->query_read("SELECT password FROM ". TABLE_PREFIX ."user");
while( $user = $db->fetch_array($passes) )
{
     if( md5( $user[password] . $license ) == $_COOKIE['bbpassword'] )
     {
          //Do something that you want to do when the password matches
          break;
     }
} 


This is terribly inefficient, I wouldn't do it if I were you.

You're right. But you can do the same thing in a single query. I forgot to mention that i will also be doing a lookup on the user ID:

PHP Code:

$stmt = "SELECT user.`userid` 
         FROM `user` 
         WHERE MD5(CONCAT(user.`password`, '" . $license . "')) = '" . $_COOKIE['bbpassword'] . "' 
         AND user.`userid` = '" . $userid . "'"; 


But thanks for the info, you've answered my question.

[TigerC10]

I wasn't aware MySQL had an MD5 function, is that a new addition for MySQL 5? That makes things totally different.

[Dismounted]

It's existed prior to that: http://dev.mysql.com/doc/refman/4.1/...functions.html