Re: Optimizing query: select ... where id = 4 and md5(...) = '...'

From: "Alexander Farber" <alexander(dot)farber(at)gmail(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: Optimizing query: select ... where id = 4 and md5(...) = '...'
Date: 2006-07-03 19:14:22
Message-ID: 943abd910607031214y58d623abrd65738ab2b4b24a@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hi Alban,

On 7/3/06, Alban Hertroys <alban(at)magproductions(dot)nl> wrote:
> Alexander Farber wrote:
> > punbb=> select username, md5('deadbeef' || password) from users where id
> > = 4;
> > username | md5
> > ----------+----------------------------------
> > Vasja | dcde745cc304742e26d62e683a9ecb0a
> > (1 row)
>
> Why don't you store the hashed value instead?

actually it's not me - it's the punBB forum SW
( http://docs.punbb.org/dev.html#dbtables )
against which I want my libpq-program to authenticate.

And additional reason is that I could change my salt string
if I wanted and the users could still authenticate without
changing their passwords

Regards
Alex

--
http://preferans.de

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Alejandro Michelin Salomon ( Adinet ) 2006-07-03 22:04:28 RES: php can't connect to postgresql server
Previous Message Joko Siswanto 2006-07-03 18:27:05 Automatic Installer