Re: [WebDNA] Encrypted password issue

This WebDNA talk-list message is from

2009

It keeps the original formatting. numero = 103201
interpreted = N
texte = Kenneth Grome wrote:> I should be able to login when I encrypt a password with a > seed value in the database, right?> > I must be doing something wrong because I'm not able to > login. I encrypt the password like this when a new user > enters it into the register form:> > [append db=xxx.db]pass=[url][encrypt seed=xxx][pass]> [/encrypt][/url][/append]> > And then I encrypt the pass value from my login form before > using it in my search string like this:> > [search db=xxx.db&eqpassdatarq=[url][encrypt seed=xxx][pass]> [/encrypt][/url]]> > So why does the login fail?> > Sincerely,> Ken Grome[encrypt seed=] uses an algorithm that creates differentvalues for each use.. but can extract the starting valuesfrom the different encrypted values.This means however that what your search value is is not whatis stored in the database. You can use encrypt without theseed value I think.Alternatively, you could create a search that finds all recordsthat equal the username,then do a showif match after decrypting all the pass values.[search.. findall_usernames] [showif [url][decrypt seed=xxxx][unurl][db_value][/unurl][/decrypt][/url]=[url][pass][/url]] This is the right user. [/showif][/search]Donovan-- Donovan BrookeWebDNA Software Corporationhttp://www.webdna.us**[Square Bracket Utopia]** Associated Messages, from the most recent to the oldest:

Re: [WebDNA] Encrypted password issue (John Butler 2009)
Re: [WebDNA] Encrypted password issue (Kenneth Grome 2009)
Re: [WebDNA] Encrypted password issue (Bob Minor 2009)
Re: [WebDNA] Encrypted password issue (Kenneth Grome 2009)
Re: [WebDNA] Encrypted password issue (Donovan Brooke 2009)
Re: [WebDNA] Encrypted password issue (Donovan Brooke 2009)
[WebDNA] Encrypted password issue (Kenneth Grome 2009)

Kenneth Grome wrote:> I should be able to login when I encrypt a password with a > seed value in the database, right?> > I must be doing something wrong because I'm not able to > login. I encrypt the password like this when a new user > enters it into the register form:> > [append db=xxx.db]pass=[url][encrypt seed=xxx][pass]> [/encrypt][/url][/append]> > And then I encrypt the pass value from my login form before > using it in my search string like this:> > [search db=xxx.db&eqpassdatarq=[url][encrypt seed=xxx][pass]> [/encrypt][/url]]> > So why does the login fail?> > Sincerely,> Ken Grome[encrypt seed=] uses an algorithm that creates differentvalues for each use.. but can extract the starting valuesfrom the different encrypted values.This means however that what your search value is is not whatis stored in the database. You can use encrypt without theseed value I think.Alternatively, you could create a search that finds all recordsthat equal the username,then do a showif match after decrypting all the pass values.[search.. findall_usernames] [showif [url][decrypt seed=xxxx][unurl][db_value][/unurl][/decrypt][/url]=[url][pass][/url]] This is the right user. [/showif][/search]Donovan-- Donovan BrookeWebDNA Software Corporationhttp://www.webdna.us**[Square Bracket Utopia]** Donovan Brooke

DOWNLOAD WEBDNA NOW!

Re: [WebDNA] Encrypted password issue

2009

Top Articles:

Related Readings: