Re: [PHP] Format of Encrypted Password

2006-09-07 Thread Chris
Kevin Murphy wrote: Yup, that's got it. It didn't occur to me that its a MySQL thing I'm used to doing this as a PHP thing and inserting an already encrypted password into MySQL. Anyone have any thoughts one way or another as to if this mysql password function is better/worse than doing i

Re: [PHP] Format of Encrypted Password

2006-09-07 Thread Kevin Murphy
Yup, that's got it. It didn't occur to me that its a MySQL thing I'm used to doing this as a PHP thing and inserting an already encrypted password into MySQL. Anyone have any thoughts one way or another as to if this mysql password function is better/worse than doing it all in PHP? --

Re: [PHP] Format of Encrypted Password

2006-09-07 Thread Eric Butera
On 9/5/06, Kevin Murphy <[EMAIL PROTECTED]> wrote: $query = "select name from table where name = '$authuser' and password = password('$auth_pw')"; If you haven't tried this you can probably create accounts yourself manually in MySQL like this: INSERT INTO table (name, password) VALUES ('user

Re: [PHP] Format of Encrypted Password

2006-09-07 Thread Oscar Gosdinski
On 9/5/06, Kevin Murphy <[EMAIL PROTECTED]> wrote: The only thing I can find anywhere in the code is this: $auth_user = $_SERVER['PHP_AUTH_USER']; $auth_pw = $_SERVER['PHP_AUTH_PW']; $query = "select name from table where name = '$authuser' and password = password('$auth_pw')"; You are using

RE: [PHP] Format of Encrypted Password

2006-09-06 Thread bruce
' - hope this clarifies/helps! -Original Message- From: Kevin Murphy [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 05, 2006 4:53 PM To: PHP Subject: Re: [PHP] Format of Encrypted Password The only thing I can find anywhere in the cod

Re: [PHP] Format of Encrypted Password

2006-09-05 Thread Chris
Kevin Murphy wrote: The only thing I can find anywhere in the code is this: $auth_user = $_SERVER['PHP_AUTH_USER']; $auth_pw = $_SERVER['PHP_AUTH_PW']; $query = "select name from table where name = '$authuser' and password = password('$auth_pw')"; I've never seen that password('$auth_pw')

Re: [PHP] Format of Encrypted Password

2006-09-05 Thread Chris
Kevin Murphy wrote: I've inherited this website and there is an application that is running on it that has a bunch of passwords stored in a mysql table. The problem is, the previous webmaster didn't leave me any instructions on how they encrypted those passwords. I don't need to figure out what

Re: [PHP] Format of Encrypted Password

2006-09-05 Thread Kevin Murphy
The only thing I can find anywhere in the code is this: $auth_user = $_SERVER['PHP_AUTH_USER']; $auth_pw = $_SERVER['PHP_AUTH_PW']; $query = "select name from table where name = '$authuser' and password = password('$auth_pw')"; I've never seen that password('$auth_pw') part before. Is th

RE: [PHP] Format of Encrypted Password

2006-09-05 Thread Chris W. Parker
Kevin Murphy on Tuesday, September 05, 2006 3:27 PM said: > The passwords are called in the application by: > > $_SERVER['PHP_AUTH_PW'] > Is there any way to tell how these passwords were encrypted? Have you tried searching the entire codebase for that string? Mig

Re: [PHP] Format of Encrypted Password

2006-09-05 Thread Kevin Murphy
On Sep 5, 2006, at 4:14 PM, Robert Cummings wrote: On Tue, 2006-09-05 at 15:27 -0700, Kevin Murphy wrote: I've inherited this website and there is an application that is running on it that has a bunch of passwords stored in a mysql table. The problem is, the previous webmaster didn't leave me

Re: [PHP] Format of Encrypted Password

2006-09-05 Thread Robert Cummings
On Tue, 2006-09-05 at 15:27 -0700, Kevin Murphy wrote: > I've inherited this website and there is an application that is > running on it that has a bunch of passwords stored in a mysql table. > The problem is, the previous webmaster didn't leave me any > instructions on how they encrypted tho