Re: Password Encryption to replicate MySQL PASSWORD function

From: Joe Conway <mail(at)joeconway(dot)com>
To: Luke Woollard <luke(at)taborvision(dot)com>
Cc: pgsql-php(at)postgresql(dot)org
Subject: Re: Password Encryption to replicate MySQL PASSWORD function
Date: 2003-01-22 04:14:29
Message-ID: 3E2E1AA5.4060205@joeconway.com
Views: Raw Message | Whole Thread | Download mbox
Thread:
Lists: pgsql-php

Luke Woollard wrote:
> In mysql I have used the 'PASSWORD('someString')' function to encrypt each
> users password. When authenticating a user for system use, I use the same
> function to compare encrypted password.
>

From the MySQL manual:
"The PASSWORD() function is used by the authentication system in MySQL Server,
you should *not* use it in your own applications. For that purpose, use MD5()
or SHA1() instead." (emphasis added)

FWIW, the algorithm used in PASSWORD() must be pretty weak, as it appears to
only create an 8-byte (16 hex chars) hash. MD5() (16 bytes/32 hex chars) and
SHA1() (20 bytes/40 hex chars) are available in contrib/pgcrypto.
Alternatively you could use the PHP functions by the same names.

HTH,

Joe

In response to

Responses

Browse pgsql-php by date

  From Date Subject
Next Message Luke Woollard 2003-01-22 04:27:54 Re: Password Encryption to replicate MySQL PASSWORD function
Previous Message Matthew Horoschun 2003-01-22 03:48:36 Re: Password Encryption to replicate MySQL PASSWORD function