Passwords

[Caduceus]

I'm currently writing a login script which works... great. But I'm going to postnuke and tailor my website around that, however, does anyone know what is the password encryption postnuke uses? Also, how easy/difficult is it to use the login from postnuke site for a session in my web pages?!?! Does that make sense?

[anigel]

postnuke uses md5($password)

Dunno about sharing sessions but it shoudl be pretty easy if you look at the code for any of the pages that currently use the postnuke session

[Caduceus]

Nice one thanks.

How do I use this MD5($password) then? In the same context that I'm using $password ????

[jaswinder_rana]

MD5 is one way encryption. once yo uencrypted the password you cannot decrypt it.
so, when you store MD5(ed) password in database then next time when user comes in and enters password then you have to MD5 that password and compare it with the password in database. MD5 always generates the same encrypted string for the same string. i mean if

$string = 'passsword';
echo MD5($string);//and say it is 123bandasd

then in future if you again do
$string = 'passsword';
echo MD5($string);//then it'll be same as 123bandasd

so for your passwords you do

$username = 'username';
$password = 'enterd by user';
$md4password=  md5($password);

//connect to database
$result = mysql_query("select password from table where username='$username'") or die;

$row = mysql_fetch_array($result);
if($row['password']==$md5password)
{
  echo 'you are authorized';
}
else
{
  echo 'you are NOT authorized';
} 

Hope this might help

[Caduceus]

Brill. Cheers!!

[loadx]

$md4password=  md5($password); 

just a small typo..for those copy and paste lovers

$md5password=  md5($password);