Re: [PHP] crypt/Password

2002-02-03 Thread Jason G.
Hi, I just thought i would point out that the entire point of crypt, md5, or MySQL password() function is to create a hash out of the original string. However, they are designed so it is computationally infeasible to take a hash and find out the original string was. Actually, it is impossib

Re: [PHP] crypt/Password

2002-02-03 Thread Jim Winstead
Phil <[EMAIL PROTECTED]> wrote: > Thanx, sounds like the way to go. > Still curious though whether there is anyway at all to get the original > password back to the user? not without storing it unencrypted or cracking the password with a dictionary attack. as you said, the php crypt() function an

Re: [PHP] crypt/Password

2002-02-03 Thread Phil
Thanx, sounds like the way to go. Still curious though whether there is anyway at all to get the original password back to the user? Jeff Sheltren <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > What you could do is send a newly generated password to them, and

Re: [PHP] crypt/Password

2002-02-03 Thread Jeff Sheltren
What you could do is send a newly generated password to them, and then allow them to change the password on your site to something easier to remember... Jeff At 11:56 PM 2/3/2002 +0800, Phil wrote: >Hi there, >I'm creating a user/password table that will use either Mysql Password or >PHP Crypt