Re: [PHP] MySQL Password Function

2003-11-06 Thread David Otton
On Thu, 6 Nov 2003 09:09:57 -0500, you wrote: >True, true. I actually use MD5() for the same reason, but, really, if >someone has access to the database to read the hashes, odds are they have >access to the rest of the database and your code. So what are you protecting >really? Many people use th

Re: [PHP] MySQL Password Function

2003-11-06 Thread John Nichel
Shaun wrote: "John Nichel" <[EMAIL PROTECTED]> wrote in message Not that this would make your site more secure (well, I guess it would be more secure than plain text), but just use it in your query INSERT INTO someDB.someTable ( username, password ) VALUES ( '{$username}', PASSWORD('{$password

Re: [PHP] MySQL Password Function

2003-11-06 Thread Shaun
"John Nichel" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Shaun wrote: > > > Hi, > > > > I am trying to make my site more secure, can anyone suggest a tutorial on > > using the mySQL password function with PHP. I can't find anything through > > google... > > > > Thanks for your h

Re: [PHP] MySQL Password Function

2003-11-06 Thread John Nichel
Shaun wrote: Hi, I am trying to make my site more secure, can anyone suggest a tutorial on using the mySQL password function with PHP. I can't find anything through google... Thanks for your help Not that this would make your site more secure (well, I guess it would be more secure than plain te

Re: [PHP] MySQL Password Function

2003-11-06 Thread CPT John W. Holmes
From: "Raditha Dissanayake" <[EMAIL PROTECTED]> > >Oh, and this will do almost NOTHING to make your site more secure. Why do > >you think it will? > > You are partly right about this we had a nice flame war about this very > issue couple of weeks ago on the jabber lists. Anyone interested in the >

Re: [PHP] MySQL Password Function

2003-11-06 Thread Raditha Dissanayake
Hi, Oh, and this will do almost NOTHING to make your site more secure. Why do you think it will? ---John Holmes... You are partly right about this we had a nice flame war about this very issue couple of weeks ago on the jabber lists. Anyone interested in the nitty gritty can google on the ja

Re: [PHP] MySQL Password Function

2003-11-06 Thread CPT John W. Holmes
From: "Raditha Dissanayake" <[EMAIL PROTECTED]> > From: "Shaun" > >I am trying to make my site more secure, can anyone suggest a tutorial on > >using the mySQL password function with PHP. I can't find anything through > >google... > > it's very simple intead of using > insert into users set userPas

Re: [PHP] MySQL Password Function

2003-11-06 Thread Raditha Dissanayake
Hi, it's very simple intead of using insert into users set userPassword='123'; you say insert into users set userPassword=password('123'); Shaun wrote: Hi, I am trying to make my site more secure, can anyone suggest a tutorial on using the mySQL password function with PHP. I can't find anything t

RE: [PHP] mysql password function

2002-09-22 Thread John Holmes
Use this: $result = mysql_query("SELECT PASSWORD(" . $_POST['password'] . ")"); $password = mysql_result($result,0); or just use mysql_fetch_row() or AS in your query so you don't have to recreate that complex column name. ---John Holmes... > -Original Message- > From: Murat Ö. [mailto