> I need to query an Oracle user table where username and encrypted > password are stored. I need to compare the user input password with the > encrypted password in the table. Can the CF Decrypt function do the > work? Can someone give me a pointer?
Usually a password in encrypted with a irreversible encryption, it should be anyways. The methods to verify the password is usually the same. The way you validate the submitted password is to encrypt the password submitted by the client with the same exact method that was used to encrypt the one that is stored, and then compare the submitted with the stored encrypted passwords. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329429 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
