Re: [PHP] Format of Encrypted Password

2006-09-07 Thread Oscar Gosdinski
On 9/5/06, Kevin Murphy [EMAIL PROTECTED] wrote: The only thing I can find anywhere in the code is this: $auth_user = $_SERVER['PHP_AUTH_USER']; $auth_pw = $_SERVER['PHP_AUTH_PW']; $query = select name from table where name = '$authuser' and password = password('$auth_pw'); You are using the

Re: [PHP] Format of Encrypted Password

2006-09-07 Thread Eric Butera
On 9/5/06, Kevin Murphy [EMAIL PROTECTED] wrote: $query = select name from table where name = '$authuser' and password = password('$auth_pw'); If you haven't tried this you can probably create accounts yourself manually in MySQL like this: INSERT INTO table (name, password) VALUES ('user',

Re: [PHP] Format of Encrypted Password

2006-09-07 Thread Kevin Murphy
Yup, that's got it. It didn't occur to me that its a MySQL thing I'm used to doing this as a PHP thing and inserting an already encrypted password into MySQL. Anyone have any thoughts one way or another as to if this mysql password function is better/worse than doing it all in PHP?

Re: [PHP] Format of Encrypted Password

2006-09-07 Thread Chris
Kevin Murphy wrote: Yup, that's got it. It didn't occur to me that its a MySQL thing I'm used to doing this as a PHP thing and inserting an already encrypted password into MySQL. Anyone have any thoughts one way or another as to if this mysql password function is better/worse than doing

RE: [PHP] Format of Encrypted Password

2006-09-06 Thread bruce
! -Original Message- From: Kevin Murphy [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 05, 2006 4:53 PM To: PHP Subject: Re: [PHP] Format of Encrypted Password The only thing I can find anywhere in the code is this: $auth_user = $_SERVER['PHP_AUTH_USER']; $auth_pw = $_SERVER['PHP_AUTH_PW

[PHP] Format of Encrypted Password

2006-09-05 Thread Kevin Murphy
I've inherited this website and there is an application that is running on it that has a bunch of passwords stored in a mysql table. The problem is, the previous webmaster didn't leave me any instructions on how they encrypted those passwords. I don't need to figure out what the old

Re: [PHP] Format of Encrypted Password

2006-09-05 Thread Robert Cummings
On Tue, 2006-09-05 at 15:27 -0700, Kevin Murphy wrote: I've inherited this website and there is an application that is running on it that has a bunch of passwords stored in a mysql table. The problem is, the previous webmaster didn't leave me any instructions on how they encrypted those

Re: [PHP] Format of Encrypted Password

2006-09-05 Thread Kevin Murphy
On Sep 5, 2006, at 4:14 PM, Robert Cummings wrote: On Tue, 2006-09-05 at 15:27 -0700, Kevin Murphy wrote: I've inherited this website and there is an application that is running on it that has a bunch of passwords stored in a mysql table. The problem is, the previous webmaster didn't leave me

RE: [PHP] Format of Encrypted Password

2006-09-05 Thread Chris W. Parker
Kevin Murphy mailto:[EMAIL PROTECTED] on Tuesday, September 05, 2006 3:27 PM said: The passwords are called in the application by: $_SERVER['PHP_AUTH_PW'] Is there any way to tell how these passwords were encrypted? Have you tried searching the entire codebase for that string? Might

Re: [PHP] Format of Encrypted Password

2006-09-05 Thread Kevin Murphy
The only thing I can find anywhere in the code is this: $auth_user = $_SERVER['PHP_AUTH_USER']; $auth_pw = $_SERVER['PHP_AUTH_PW']; $query = select name from table where name = '$authuser' and password = password('$auth_pw'); I've never seen that password('$auth_pw') part before. Is

Re: [PHP] Format of Encrypted Password

2006-09-05 Thread Chris
Kevin Murphy wrote: I've inherited this website and there is an application that is running on it that has a bunch of passwords stored in a mysql table. The problem is, the previous webmaster didn't leave me any instructions on how they encrypted those passwords. I don't need to figure out

Re: [PHP] Format of Encrypted Password

2006-09-05 Thread Chris
Kevin Murphy wrote: The only thing I can find anywhere in the code is this: $auth_user = $_SERVER['PHP_AUTH_USER']; $auth_pw = $_SERVER['PHP_AUTH_PW']; $query = select name from table where name = '$authuser' and password = password('$auth_pw'); I've never seen that password('$auth_pw')