you don't decrypt the password. what you do is you crypt the password and then when they log in you take what they said was their password and crypt that and then you see if their the exact same. you don't have to decrypt it just compare the two results.
----- Original Message ----- From: "Tom Whiting" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Sunday, September 22, 2002 6:07 PM Subject: Odd crypt question Greetings, Over the past few months, I've been in the process of dealing with sql files, playing with web users and the like, in the ultimate effort to create a user database that is intertwined with web and telnet users (eventually). In doing so, however, I've run across a few problems with crypt(), or maybe it's just that I don't understand crypt all that well (either way it's a problem). The file gets written to the database (sql), rather well, but i can't figure out which version of encryption is used to figure rom passwords out. Is this system crypt? md5? custom? If it's custom, is there a way to take this password, decrypt it (without having to use plain passwords), in order for it to be encrypted, or thrown into the database so that php/sql can recognize it somehow, or is this pretty much out of the question? -- ROM mailing list [email protected] http://www.rom.org/cgi-bin/mailman/listinfo/rom

