[PHP] Password authentication failed with pg_connect (apache2 / win32 / php4.3.1)

2003-03-27 Thread Richard Hollis
Im running apache2, php4.3.1 on win32 and everything is dandy apart from the fact that pg_connect won't connect to a server which requires encrypted passwords. I get: Warning: pg_connect() [function.pg-connect]: Unable to connect to PostgreSQL server: FATAL 1: Password authentication failed for u

Re: [PHP] Password Authentication

2003-03-23 Thread trlists
On 23 Mar 2003 Justin French wrote: > That's in the user notes... ignor it... md5() does not have to be salted... > infact, you WANT the md5() to be static... because you will compare the > md5()'d password in the database with the md5()'d password that they submit > on a form. Exactly. On this

Re: [PHP] Password Authentication

2003-03-22 Thread Jason Sheets
You can use a static salt from within your application though. Jason Justin French wrote: on 23/03/03 2:02 AM, [EMAIL PROTECTED] ([EMAIL PROTECTED]) wrote: On 23 Mar 2003 Justin French wrote: I just md5() the passwords, and reset them if needed... rather than retrieving. The advantage for me

Re: [PHP] Password Authentication

2003-03-22 Thread Justin French
on 23/03/03 2:02 AM, [EMAIL PROTECTED] ([EMAIL PROTECTED]) wrote: > On 23 Mar 2003 Justin French wrote: > >> I just md5() the passwords, and reset them if needed... rather than >> retrieving. The advantage for me on this is that it's portable... md5() is >> part of the base PHP install, whereas

Re: [PHP] Password Authentication

2003-03-22 Thread David Otton
On Sat, 22 Mar 2003 09:31:14 -0500, you wrote: >First off, there are multiple encryption methods out there -- PHP >crypt() and the mcrypt functions, and MySQL encrypt(), for encryption; >and the md5 etc. functions for hashing. Is there any information on >best practices here, particularly in u

Re: [PHP] Password Authentication

2003-03-22 Thread trlists
On 23 Mar 2003 Justin French wrote: > I just md5() the passwords, and reset them if needed... rather than > retrieving. The advantage for me on this is that it's portable... md5() is > part of the base PHP install, whereas the mcrypt stuff isn't (or wasn't). Something like that was my inclinatio

Re: [PHP] Password Authentication

2003-03-22 Thread Justin French
I just md5() the passwords, and reset them if needed... rather than retrieving. The advantage for me on this is that it's portable... md5() is part of the base PHP install, whereas the mcrypt stuff isn't (or wasn't). Justin on 23/03/03 1:31 AM, [EMAIL PROTECTED] ([EMAIL PROTECTED]) wrote: > I

[PHP] Password Authentication

2003-03-22 Thread trlists
I am trying to build password authentication into a database front end for a MySQL DB. I find the php docs on this point quite confusing so I have a lot of questions. I can use a one-way hash to do this if that's the best way, as I don't need to retrieve the password. However if I could do so