Re: [PHP] MsSQL PASSWORD()

2002-02-13 Thread val petruchek

Works! Great! Nobody (even me!) can not understand user passwords! Thanx!

Valentin Petruchek (aki Zliy Pes)
*** Cut the beginning ***
http://zliypes.com.ua
mailto:[EMAIL PROTECTED]
- Original Message -
From: Michael Sims [EMAIL PROTECTED]
To: PHP [EMAIL PROTECTED]
Sent: Tuesday, February 12, 2002 3:06 PM
Subject: Re: [PHP] MsSQL PASSWORD()


 At 09:26 AM 2/12/2002 +0200, val petruchek wrote:
 My current project runs on Win2k, MsSQL 2k, and PHP 4.0.6
 
 My problem is that i can not enable md5 extension because of
 Unable to load dynamic library
'c:\windows\php\extensions/php_mcrypt.dll' -
 The specified procedure could not be found. in Unknown on line 0

 You don't have to load the mcrypt extension to use md5(), they are two
 seperate things.  m5() is a function built in to PHP.  Mcrypt is used when
 you want to encrypt something and then later decrypt it, where md5() is a
 one-way crypt...once you have hashed something with md5() it is impossible
 to retrieve the original string from the hash...


 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, visit: http://www.php.net/unsub.php





-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] MsSQL PASSWORD()

2002-02-12 Thread Michael Sims

At 09:26 AM 2/12/2002 +0200, val petruchek wrote:
My current project runs on Win2k, MsSQL 2k, and PHP 4.0.6

My problem is that i can not enable md5 extension because of
Unable to load dynamic library 'c:\windows\php\extensions/php_mcrypt.dll' -
The specified procedure could not be found. in Unknown on line 0

You don't have to load the mcrypt extension to use md5(), they are two 
seperate things.  m5() is a function built in to PHP.  Mcrypt is used when 
you want to encrypt something and then later decrypt it, where md5() is a 
one-way crypt...once you have hashed something with md5() it is impossible 
to retrieve the original string from the hash...


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] MsSQL PASSWORD()

2002-02-12 Thread DL Neil

Zliy Pes,
(I have no idea what this name means - trust it doesn't mean that you'll be coming 
after me with a sharp knife!)

 My current project runs on Win2k, MsSQL 2k, and PHP 4.0.6

 My problem is that i can not enable md5 extension because of
 Unable to load dynamic library 'c:\windows\php\extensions/php_mcrypt.dll' -
 The specified procedure could not be found. in Unknown on line 0

 So,...


Noted that someone else has replied otherwise - possibly the question has now 'gone 
away', but...

with the Windows-ification of PHP come a few problems, not the least of which is the \ 
or / issue. If you notice
above, there is a mixture of slash directions. In php.ini check out the extensions 
directory definition, and
then the php_mcrypt.dll line. Ensure that the slash direction is consistent.

Regards,
=dn



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] MsSQL PASSWORD()

2002-02-11 Thread Michael Sims

At 06:34 PM 2/11/2002 +0200, val petruchek wrote:
Hello, list!

I'm looking for analog of Mysql password() func in MsSQL. My goal is not to
store certain field (i.e. user passwords) as a clear text.

I don't know the equivalent off the top of my head, but a coworker of mine 
has used it before.  Let me know if no one gets back to you and I'll ask 
him what it is.  I do remember that he said it was unsupported and 
undocumented, at least in SQL Server 7.

Alternatively you can do what I do and use the PHP md5() to hash the 
password before you store it, and then md5() any supplied password and 
compare it against the stored hash.  In other words, you can accomplish the 
exact same thing that MySQL does, only you do it in PHP and not MySQL...


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] Includes in your document root (was: Re: [PHP] MsSQL PASSWORD())

2002-02-11 Thread bvr


In that case, forget what I said ';)

But since you can't say this enough, here is it once more:

*** Always remember to keep those includes *out of* your document root;

This prevents accidental displaying of source code or
(which I heard on this list could even be worse) out-of-context execution.

bvr.


On Tue, 12 Feb 2002 10:09:38 +1000, Liam MacKenzie wrote:

I think by saying under the webserver root, he means any directory below
it.  For instance, if you webserver root was /www/root, put it here: /www




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] MsSQL PASSWORD()

2002-02-11 Thread val petruchek

My current project runs on Win2k, MsSQL 2k, and PHP 4.0.6

My problem is that i can not enable md5 extension because of
Unable to load dynamic library 'c:\windows\php\extensions/php_mcrypt.dll' -
The specified procedure could not be found. in Unknown on line 0

So,...

Valentin Petruchek (aki Zliy Pes)
*** Cut the beginning ***
http://zliypes.com.ua
mailto:[EMAIL PROTECTED]
- Original Message -
From: Michael Sims [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, February 12, 2002 2:29 AM
Subject: Re: [PHP] MsSQL PASSWORD()


 At 06:34 PM 2/11/2002 +0200, val petruchek wrote:
 Hello, list!
 
 I'm looking for analog of Mysql password() func in MsSQL. My goal is not
to
 store certain field (i.e. user passwords) as a clear text.

 I don't know the equivalent off the top of my head, but a coworker of mine
 has used it before.  Let me know if no one gets back to you and I'll ask
 him what it is.  I do remember that he said it was unsupported and
 undocumented, at least in SQL Server 7.

 Alternatively you can do what I do and use the PHP md5() to hash the
 password before you store it, and then md5() any supplied password and
 compare it against the stored hash.  In other words, you can accomplish
the
 exact same thing that MySQL does, only you do it in PHP and not MySQL...


 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, visit: http://www.php.net/unsub.php





-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php