CF's hash() function returns its output hex string with uppercase letters. Generally not a problem if you only apply a single hash to a string, but if you need to do multiple hashes, then the final outcome is unlikely to match that of many other applications that use lower case hexadecimal digits. I just wasted more than an hour realizing this.
Trying to authenticate against a vBulletin user table, which uses a hashing functon of $hash = MD5(MD5($password) + $salt)) In CF, you need to force the intermediate string to lower case (and optionally, do so to the finah string as well. hashedpwd = lCase(hash(lCase(hash(form.password)) & user.salt)) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:304613 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
