Forum Moderators: coopster

Message Too Old, No Replies

encrypted password comparison

         

flix52

2:04 pm on Jul 31, 2008 (gmt 0)

10+ Year Member



I have a form that is doing a password validation against an encrypted/salted password in a db. The field in the db is as such:

(md5 encrypted password+salt):(salt)

I need to parse the salt out of the db field. Any help would be appreciated.

[edited by: eelixduppy at 2:19 pm (utc) on July 31, 2008]
[edit reason] disabled smileys [/edit]

eelixduppy

2:20 pm on Jul 31, 2008 (gmt 0)



Welcome to WebmasterWorld.

You won't be able to grab the salt.

flix52

2:22 pm on Jul 31, 2008 (gmt 0)

10+ Year Member



why not? what you're saying is that I can't parse a string. that doesn't seem correct to me.

flix52

2:24 pm on Jul 31, 2008 (gmt 0)

10+ Year Member



nevermind, I'll just use explode and the : as the delimiter

eelixduppy

2:25 pm on Jul 31, 2008 (gmt 0)



Oh, I'm sorry. I thought the salt was md5 encrypted with the password. I didn't understand that it was just the string. Exploding should do fine.

jatar_k

4:15 pm on Jul 31, 2008 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



just a thought

there's no point of a salt if it's stored in there with the encrypted salted pass