Re: [PHP] md5 crypt question

2001-07-31 Thread Richard Lynch
Yeah, I'm getting 2 and 0. Lame. What's the answer to this. Go back to your PHP source directory and start digging through config.log and config.cache or even re-run the configure to see what's going on with various crypt libraries. If you installed them in a non-standard place, maybe PHP

Re: [PHP] md5 crypt question

2001-07-18 Thread Jeremy Hansen
This is all better now. I compiled with libmcrypt and php-4.0.6 at the same time, so I'm not sure exactly which caused the fix, but it works now. Also, the perl module I was using seemed to generate apache stype md5 hash, which is another reason why authenticating with postgres and md5 hashes

Re: [PHP] md5 crypt question

2001-07-17 Thread tc lewis
not sure if you've gotten any help on this yet. perhaps test the CRYPT_SALT_LENGTH and CRYPT_MD5 constants to make sure that your system and compiled php support md5 via crypt(). also, what salts did you try? note the comments at the bottom of http://php.net/manual/en/function.crypt.php about

Re: [PHP] md5 crypt question

2001-07-17 Thread Jeremy Hansen
Well, I'm assuming, perhaps incorrectly that the perl modules I used derived its md5 capabilities from the system. I did see all the comments on the crypt() page and basically copied each one. When passing a md5 looking salt, crypt() doesn't seem to do anything special with it and my salt

Re: [PHP] md5 crypt question

2001-07-17 Thread Jeremy Hansen
On Tue, 17 Jul 2001, tc lewis wrote: try: php echo(CRYPT_SALT_LENGTH); ? php echo(CRYPT_MD5); ? or: php echo constant(CRYPT_SALT_LENGTH); ? php echo constant(CRYPT_MD5); ? you should get output of 12 and 1 (not 2 and 0) if md5 is supported in crypt(), i think. you compiled php on

Re: [PHP] md5 crypt question

2001-07-17 Thread Jeremy Hansen
On Tue, 17 Jul 2001, tc lewis wrote: try: php echo(CRYPT_SALT_LENGTH); ? php echo(CRYPT_MD5); ? or: php echo constant(CRYPT_SALT_LENGTH); ? php echo constant(CRYPT_MD5); ? you should get output of 12 and 1 (not 2 and 0) if md5 is supported in crypt(), i think. Yeah, I'm getting 2 and

Re: [PHP] md5 crypt question

2001-07-17 Thread tc lewis
On Tue, 17 Jul 2001, Jeremy Hansen wrote: On Tue, 17 Jul 2001, tc lewis wrote: try: php echo(CRYPT_SALT_LENGTH); ? php echo(CRYPT_MD5); ? or: php echo constant(CRYPT_SALT_LENGTH); ? php echo constant(CRYPT_MD5); ? you should get output of 12 and 1 (not 2 and 0) if md5 is

Re: [PHP] md5 crypt question

2001-07-17 Thread Jeremy Hansen
On Tue, 17 Jul 2001, tc lewis wrote: On Tue, 17 Jul 2001, Jeremy Hansen wrote: On Tue, 17 Jul 2001, tc lewis wrote: try: php echo(CRYPT_SALT_LENGTH); ? php echo(CRYPT_MD5); ? or: php echo constant(CRYPT_SALT_LENGTH); ? php echo constant(CRYPT_MD5); ? you should get

Re: [PHP] MD5 / crypt

2001-02-06 Thread Alexander Wagner
Dan Harrington wrote: What is the best way to encrypt/decrypt strings when passing between php pages? If your encryption is meant to be anything near secure, there is only one way: DON'T GET or POST-Parameters are for user-input. Handing information over to the client and taking it back

Re: [PHP] MD5 / crypt

2001-02-06 Thread David VanHorn
GET or POST-Parameters are for user-input. Handing information over to the client and taking it back later is a potential security leak. If you have no means of revalidating the information after it crossed the so called trust boundary, you should't do it. Send a handler, some random and

RE: [PHP] MD5 / crypt

2001-02-06 Thread Dan Harrington
If your encryption is meant to be anything near secure, there is only one way: DON'T Well, this is true. I kinda just want to be able to pass things back and forth without giving the average user the ability to even have a clue as to what I am doing. If they can't see, they will have less