Password encryption method

[Marco van Herwaarden]

Originally Posted by Nakor

and yep $row['password'] is the password field from the database.

The password stored in teh database already is a md5 hash. You can not calculate back teh password from it if this is what you're trying.

Like Kirby said, you can with that formula calculate the hash of a userinputed password to compaire to the (hashed) password stored in the database, to see if it matches.

[Link14716]

Originally Posted by MarcoH64

The password stored in teh database already is a md5 hash. You can not calculate back teh password from it if this is what you're trying.

Like Kirby said, you can with that formula calculate the hash of a userinputed password to compaire to the (hashed) password stored in the database, to see if it matches.

He's trying to match to cookie value, with is hashed again with the license number.

[Marco van Herwaarden]

Originally Posted by Link14716

He's trying to match to cookie value, with is hashed again with the license number.

Yes that's what he try to do, but if i read back his last 2 posts:

ok I tried it like this:
echo md5($row['password'] . 'LicenseID');
Yet it still doesnt match =(
Also I confirmed that this is definately my license ID and not my customer ID.

And

and yep $row['password'] is the password field from the database.

It looks like he is trying the md5 on the pass stored in the database.

Oops re-read the whole thing again, and i think i made a mistake here. You're probably right that he already understood it correct.

[Nakor]

Nah I can't get it heh, I'm full on trying all combinations of the password and my license ID but I doesn't salt go in there somewhere? And yeah I'm trying to compare the set cookie with the persons password to see if they REALLY are logged in.

[Link14716]

As said, the password stored in the database is md5(md5(password) . salt).
The password stored in cookies is md5(md5(md5(password) . salt) . licensenumber).

[Paul M]

Sorry to go slightly off topic, but what is the "salt" bit ?

[Zachery]

Originally Posted by Paul M

Sorry to go slightly off topic, but what is the "salt" bit ?

Its a random blurb of 3-4 characters generated when someone registereds to further remove the ability of bruteforcing passwords

[Nakor]

Ok got it working, thanks heaps for the help =)

[the drifter]

Originally Posted by Nakor

Ok got it working, thanks heaps for the help =)

how did you get it working i am trying to do the same

[GreeceMonkey]

Hello people,
can somebody help me with my SQL. I have the same problems as above, and still cant get it working.

Here is mySQL syntax

SELECT MD5(CONCAT(MD5("6536e4053b7eb3375d3ef92acceab8e2") , "Lxxxxxxx"));
the hash above is the one found in my password column in the user table

I took the licence number out of the post, but it is the L number at the top of all my PHP pages, however I cant get this to match the cookie value for the userpassword.

Can any body help ?

Graham