you don't decrypt the password. what you do is you crypt the password and
then when they log in you take what they said was their password and crypt
that and then you see if their the exact same. you don't have to decrypt it
just compare the two results.

----- Original Message -----
From: "Tom Whiting" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Sunday, September 22, 2002 6:07 PM
Subject: Odd crypt question


Greetings,

Over the past few months, I've been in the process of dealing with sql
files,
playing with web users and the like, in the ultimate effort to create a user
database that is intertwined with web and telnet users (eventually).

In doing so, however, I've run across a few problems with crypt(), or maybe
it's just that I don't understand crypt all that well (either way it's a
problem).

The file gets written to the database (sql), rather well, but i can't figure
out which version of encryption is used to figure rom passwords out. Is this
system crypt? md5? custom?

If it's custom, is there a way to take this password, decrypt it (without
having to use plain passwords), in order for it to be encrypted, or thrown
into the database so that php/sql can recognize it somehow, or is this
pretty
much out of the question?

--
ROM mailing list
[email protected]
http://www.rom.org/cgi-bin/mailman/listinfo/rom


Reply via email to