Re: [PHP] md5 crypt question

2001-07-31 Thread Richard Lynch
> Yeah, I'm getting 2 and 0. Lame. What's the answer to this. Go back to your PHP source directory and start digging through config.log and config.cache or even re-run the configure to see what's going on with various crypt libraries. If you installed them in a non-standard place, maybe PHP ju

Re: [PHP] md5 crypt question

2001-07-18 Thread Jeremy Hansen
This is all better now. I compiled with libmcrypt and php-4.0.6 at the same time, so I'm not sure exactly which caused the fix, but it works now. Also, the perl module I was using seemed to generate "apache stype" md5 hash, which is another reason why authenticating with postgres and md5 hashes

Re: [PHP] md5 crypt question

2001-07-17 Thread Jeremy Hansen
On Tue, 17 Jul 2001, tc lewis wrote: > > On Tue, 17 Jul 2001, Jeremy Hansen wrote: > > On Tue, 17 Jul 2001, tc lewis wrote: > > > try: > > > > > > > > > > > > or: > > > > > > > > > > > > you should get output of 12 and 1 (not 2 and 0) if md5 is supported in > > > crypt(), i think. > > > > Yea

Re: [PHP] md5 crypt question

2001-07-17 Thread tc lewis
On Tue, 17 Jul 2001, Jeremy Hansen wrote: > On Tue, 17 Jul 2001, tc lewis wrote: > > try: > > > > > > > > or: > > > > > > > > you should get output of 12 and 1 (not 2 and 0) if md5 is supported in > > crypt(), i think. > > Yeah, I'm getting 2 and 0. Lame. What's the answer to this. i'm not

Re: [PHP] md5 crypt question

2001-07-17 Thread Jeremy Hansen
On Tue, 17 Jul 2001, tc lewis wrote: > > try: > > > > or: > > > > you should get output of 12 and 1 (not 2 and 0) if md5 is supported in > crypt(), i think. Yeah, I'm getting 2 and 0. Lame. What's the answer to this. -jeremy > you compiled php on the system it's running on? if you used

Re: [PHP] md5 crypt question

2001-07-17 Thread Jeremy Hansen
On Tue, 17 Jul 2001, tc lewis wrote: > > try: > > > > or: > > > > you should get output of 12 and 1 (not 2 and 0) if md5 is supported in > crypt(), i think. > > you compiled php on the system it's running on? if you used a binary rpm > or something, and the system it was compiled on didn't s

Re: [PHP] md5 crypt question

2001-07-17 Thread tc lewis
try: or: you should get output of 12 and 1 (not 2 and 0) if md5 is supported in crypt(), i think. you compiled php on the system it's running on? if you used a binary rpm or something, and the system it was compiled on didn't support md5, then it won't work. -tcl. On Tue, 17 Jul 2001,

Re: [PHP] md5 crypt question

2001-07-17 Thread Jeremy Hansen
Well, I'm assuming, perhaps incorrectly that the perl modules I used derived its md5 capabilities from the system. I did see all the comments on the crypt() page and basically copied each one. When passing a md5 looking salt, crypt() doesn't seem to do anything special with it and my salt remai

Re: [PHP] md5 crypt question

2001-07-17 Thread tc lewis
not sure if you've gotten any help on this yet. perhaps test the CRYPT_SALT_LENGTH and CRYPT_MD5 constants to make sure that your system and compiled php support md5 via crypt(). also, what salts did you try? note the comments at the bottom of http://php.net/manual/en/function.crypt.php about d

RE: [PHP] MD5 / crypt

2001-02-06 Thread Dan Harrington
> If your encryption is meant to be anything near secure, there is only > one way: > DON'T Well, this is true. I kinda just want to be able to pass things back and forth without giving the average user the ability to even have a clue as to what I am doing. If they can't see, they will have less

Re: [PHP] MD5 / crypt

2001-02-06 Thread David VanHorn
> >GET or POST-Parameters are for user-input. Handing information over to the >client and taking it back later is a potential security leak. If you have >no means of revalidating the information after it crossed the so called >trust boundary, you should't do it. >Send a handler, some random an

Re: [PHP] MD5 / crypt

2001-02-06 Thread Alexander Wagner
Dan Harrington wrote: > What is the best way to encrypt/decrypt strings when passing between > php pages? If your encryption is meant to be anything near secure, there is only one way: DON'T GET or POST-Parameters are for user-input. Handing information over to the client and taking it back la

RE: [PHP] MD5 / crypt

2001-02-06 Thread James Atkinson
I've run into this befor run base64_encode() on the string befor you pass it around then base64_decode() after you get it where its going. - James > Hello, > > What is the best way to encrypt/decrypt strings when passing between php > pages? > > I am using md5 and currently get strings that prod

Re: [PHP] MD5 / crypt

2001-02-06 Thread David VanHorn
> >e.g. >5V"g\7`Qv1Sc]aV&Q4a6#bW>SbU!f_4V1QvPaUe 5Q!c b Something else is "helping" you. MD5 output does not look like that. MD5 is 32 hex chars, 0-9 and a-f I have not tried passing MD5 values out to the browser though, it may be the browser "helping". I use MD5 extensively on my spamwhack