Justtechjobs.com Find a programming school near you






Online Campus Both


php3-list | 200003

Re: [PHP3] MD5 encryption problem From: Brad Bonkoski (bbc1049 <email protected>)
Date: 03/20/00

the question I ask is Why? Why encrypt with php to match against the /etc/shadow
file? Remember, PHP is server side which means that the password still floats on
the wire as plain text! I would suggest using SSL. As for the salt. Unix crypt
takes a random 2 charater "salt" and uses that to encrypt the password.
Because...if you use md5 to encrypt identitcal password they would look identical
encrypted too, but not with crypt. If you really want some client side crypt
stuff I can send you some code samples and such, but it is a horrible process and
I would say use SSL!
-Brad

Rene Ruppert wrote:

> Hi!
>
> I would like to encrypt a password the user types in and compare it to the
> password in /etc/shadow.
> But what must I do to make crypt() encrypt the password the same way as it
> was done in /etc/shadow?
> What ist the correct salt-parameter?
>
> Thanks.
>
> -----------------------------
> Rene Ruppert
> rene.ruppert <email protected>
> -----------------------------
>
> --
> PHP 3 Mailing List <http://www.php.net/>
> To unsubscribe, send an empty message to php3-unsubscribe <email protected>
> To subscribe to the digest, e-mail: php3-digest-subscribe <email protected>
> To search the mailing list archive, go to: http://www.php.net/mailsearch.php3
> To contact the list administrators, e-mail: php-list-admin <email protected> 

-- 
PHP 3 Mailing List <http://www.php.net/>
To unsubscribe, send an empty message to php3-unsubscribe <email protected>
To subscribe to the digest, e-mail: php3-digest-subscribe <email protected>
To search the mailing list archive, go to: http://www.php.net/mailsearch.php3
To contact the list administrators, e-mail: php-list-admin <email protected>