Decode mysql with php

[hyper]

i can encode this into a blob on my table

but how the fuck do i decode it?

$string = "insert into user (username, passwd, email, verify,prefs)values ('$username', ENCODE('$password', 'ba'), '$email','$code','$prefs')";
$result = mysql_query($string);

[psyko514]

why would you put that into a blob?

[hyper]

the MySQL encode() function returns a binary string, which needs to be stored in a BLOB column type

[psyko514]

why use encode()? why not md5() or mcrypt()?

anyways, you have to use the decode() function, but it needs the result of encode()

DECODE (encrypted_password, pass_string)

[hyper]

because i wanted to echo their current password and give them the option to change it, but i guess i will just give them the option to change it without displaying their current password

[Nysus]

Use md5

Cheers,
Matt

[hyper]

Originally posted by Nysus
Use md5

Cheers,
Matt

md5 cant be decoded ..
just like the password() function

goes in but cant come out

[psyko514]

I don't see why you'd show them their password and then offer to change it, unless the password is randomly generated?

[hyper]

well here is the deal

im writing the script so when they signup they choose their own password, but if they lose their password it generates one randomly.
So Then I wanted to Display the generated password and let them change it to something else ..
but i will just let them change it , by typing in a new password , then updating the table .. just like it did when they signed up

[SilverTab]

Yeah md5 is one-way encoding...why not use crypt() ?

[Lane]

why use encoding if its gonna be decodable? it doesnt really provide security then.

[Lane]

Originally posted by hyper
well here is the deal

im writing the script so when they signup they choose their own password, but if they lose their password it generates one randomly.
So Then I wanted to Display the generated password and let them change it to something else ..
but i will just let them change it , by typing in a new password , then updating the table .. just like it did when they signed up

generate the new pass.. encrypt in with a one-way algorithm, put it in the database, and also email it to them (or display it on the page or whatever) .. there you have it, you have given them the new pass and its also one-way encrypted in the database.. they now need to enter the new pass to be able to change it to something else..

thats the common way of doing it

...or during the reset process, you can have them choose what pass to reset it to..

[hyper]

Originally posted by Lane


generate the new pass.. encrypt in with a one-way algorithm, put it in the database, and also email it to them (or display it on the page or whatever) .. there you have it, you have given them the new pass and its also one-way encrypted in the database.. they now need to enter the new pass to be able to change it to something else..

thats the common way of doing it

...or during the reset process, you can have them choose what pass to reset it to..

thanx lane i will do that.. just allow them to change it o a familiar password once they log in