Wierd - Query failing from function?

[allanon]

Hello, I have a variable, i'll say it's named $password. T

$encrypted_password = 'long string';
$decrypted_password = decrypt($encrypted_password);
echo $decrypted_password;
// echo outputs the correct password //
$select = mysql_query("SELECT * FROM users WHERE login_id = $id AND password = '$decrypted_password'") or die(mysql_error());
// the select fails //
// when I replace $decrypted_password with the password, it works // 

Changing $decrypted_password to the correct password also makes the query successful.

The "decrypt()" function *is* decrypting it, but it won't work in the query?!?

[allanon]

Well, I think i will simply use md5/sha1. I am storing the encrypted password in a cookie to keep users logged in. Do you think a var that is md5() could be decrypted?
How bout a sha1(md5($var))? Or is md5($var) enough?

[Ap0s7le]

Why would you have to decrypt it anyhow? I'd take their pass, encrypt or MD5 it and then validate against what's in the DB. Also I personally use MD5, because you can't 'decrypt' it due to it not being encrypted, it's a hash.

so long