Menu
Community /Pin to ProfileBookmark
@NogDogMay 24.2006 — #MySQL has a password() function you can use to do the encryption. When you store the password, the query might be something like:
Then, when you want to validate a password from the login form:
@NogDogMay 24.2006 — #MD5 is a one-way encryption algorithm (essentially the same sort of thing that the PASSWORD function does in MySQL). If you wanted to use it instead, then you would encrypt the input password within your PHP script before inserting it into the database or querying it.
@NogDogMay 24.2006 — #You cannot decrypt it, md5 is "one-way" encryption. (Actually, it creates a "hash" value from the supplied string, but don't worry about that.) What you do is use the same md5 function to encrypt the user's password when he logs in, then compare that to the already encrypted value in the database:
securing passwords…
hi,
i am new to php.i am trying to create user registration form. i want to encrypt the password. My friend told me to use MD5().but i dont know how to use it.
And how should i store in the password in the database? ?
Sign in
to post a comment16 Comments(s) ↴
0
@NogDogMay 24.2006 — #MySQL has a password() function you can use to do the encryption. When you store the password, the query might be something like:[code=php]
$query = <<<EOD
INSERT INTO table_name (login, password)
VALUES ('{$_POST['login']}', PASSWORD('{$_POST['password']}'))
EOD;
[/code]Then, when you want to validate a password from the login form:
[code=php]
$query = <<<EOD
SELECT * FROM table_name
WHERE login = '{$_POST['login']}' AND password = PASSWORD('{$_POST['password']}')
EOD;
[/code]0
@NogDogMay 24.2006 — #MD5 is a one-way encryption algorithm (essentially the same sort of thing that the PASSWORD function does in MySQL). If you wanted to use it instead, then you would encrypt the input password within your PHP script before inserting it into the database or querying it.[code=php]
$encryptedPassword = md5($_POST['password']);
$query = <<<EOD
INSERT INTO table_name (login, password)
VALUES ('{$_POST['login']}', '$encryptedPassword'
EOD;
[/code]0
@NogDogMay 24.2006 — #You cannot decrypt it, md5 is "one-way" encryption. (Actually, it creates a "hash" value from the supplied string, but don't worry about that.) What you do is use the same md5 function to encrypt the user's password when he logs in, then compare that to the already encrypted value in the database:[code=php]
$encryptedPassword = md5($_POST['password']);
$login = $_POST['login'];
$query = "SELECT * FROM table_name WHERE login = '$login' AND `password = '$encryptedPassword'";
$result = mysql_query($query) or die(mysql_error());
if(mysql_num_rows($result))
{
// found a match for login and password
}
else
{
// login/password combination is not in database
}
[/code]