Well the php command I gave earlier is the correct one as I have just tested it on a box with php.
So I'm guessing that the php md5() function encodes slightly differently to the CF hash() function. Does anyone know the difference? Michael > > From: <[EMAIL PROTECTED]> > Date: 2006/11/06 Mon PM 08:09:49 GMT > To: CF-Talk <[email protected]> > Subject: re: hash() encryption > > Rick, > > To be honest I thought it would be that, however it doesn't return the > expected value. > > I'm going to have to look again at the original php code and see if I'm > missing something else. > > Don't suppose anyone knows how vbulletin produces it's passwords do they? > > Thanks, > Michael > > > > -----Original Message----- > From: Rick Root [mailto:[EMAIL PROTECTED] > Sent: 06 November 2006 19:58 > To: CF-Talk > Subject: Re: hash() encryption > > [EMAIL PROTECTED] wrote: > > > > $passwd = md5(md5($passwd) . $SALT); > > > > What would be the equivalent syntax in CF? > > <cfset passwd = hash(hash(passwd) & SALT)> > > Pretty straightforward. > > Rick > > > ----------------------------------------- > Email sent from www.ntlworld.com > Virus-checked using McAfee(R) Software > Visit www.ntlworld.com/security for more information > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:259365 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

