We had a client who wanted us to encrypt their
passwords. Our argument was that maybe their database
is not well protected. Only the dba and the
application should have access to the database.
No-one else should be able to view their data anyways.
We didn't see any need to encrypt the passwords.
Any thoughts...
--- Hawk <[EMAIL PROTECTED]> wrote:
> Ok I got it working now, with the update and
> database connect etc.. thanks
> guys :)
> this is not a problem(yet), more a thought.. is it
> really necesary to
> encrypt passwords, I mean, what does it prevent, me
> from seeing them using
> mysql.exe ? :p
> I tried and it worked fine to almost all points..
> worked with the user info
> update and so on.. but I seem to do something wrong
> and can't log back on
> since I encrypted the password... :p
> I used UPDATE users SET
> password=password('$password') but by some reason I
> can't seem to decrypt it on the login page.. any
> help would again be
> appreciated.. :)
>
> Hawk
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> To contact the list administrators, e-mail:
> [EMAIL PROTECTED]
>
=====
Anas Mughal
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Tel: 973-249-6665
__________________________________________________
Do You Yahoo!?
Send FREE video emails in Yahoo! Mail!
http://promo.yahoo.com/videomail/
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
