Re: [WebDNA] Encrypted password issue
This WebDNA talk-list message is from 2009
It keeps the original formatting.
numero = 103201
interpreted = N
texte = Kenneth Grome wrote: > I should be able to login when I encrypt a password with a > seed value in the database, right? > > I must be doing something wrong because I'm not able to > login. I encrypt the password like this when a new user > enters it into the register form: > > [append db=xxx.db]pass=[url][encrypt seed=xxx][pass] > [/encrypt][/url][/append] > > And then I encrypt the pass value from my login form before > using it in my search string like this: > > [search db=xxx.db&eqpassdatarq=[url][encrypt seed=xxx][pass] > [/encrypt][/url]] > > So why does the login fail? > > Sincerely, > Ken Grome [encrypt seed=] uses an algorithm that creates different values for each use.. but can extract the starting values from the different encrypted values. This means however that what your search value is is not what is stored in the database. You can use encrypt without the seed value I think. Alternatively, you could create a search that finds all records that equal the username, then do a showif match after decrypting all the pass values. [search.. findall_usernames] [showif [url][decrypt seed=xxxx][unurl][db_value][/unurl][/decrypt][/url]=[url][pass][/url]] This is the right user. [/showif] [/search] Donovan -- Donovan Brooke WebDNA Software Corporation http://www.webdna.us **[Square Bracket Utopia]**
Associated Messages, from the most recent to the oldest:
Kenneth Grome wrote: > I should be able to login when I encrypt a password with a > seed value in the database, right? > > I must be doing something wrong because I'm not able to > login. I encrypt the password like this when a new user > enters it into the register form: > > [append db=xxx.db]pass=
[url][encrypt seed=xxx][pass] > [/encrypt][/url][/append] > > And then I encrypt the pass value from my login form before > using it in my search string like this: > > [search db=xxx.db&eqpassdatarq=
[url][encrypt seed=xxx][pass] > [/encrypt][/url]] > > So why does the login fail? > > Sincerely, > Ken Grome [encrypt seed=] uses an algorithm that creates different values for each use.. but can extract the starting values from the different encrypted values. This means however that what your search value is is not what is stored in the database. You can use encrypt without the seed value I think. Alternatively, you could create a search that finds all records that equal the username, then do a showif match after decrypting all the pass values. [search.. findall_usernames] [showif
[url][decrypt seed=xxxx]
[unurl][db_value][/unurl][/decrypt][/url]=
[url][pass][/url]] This is the right user. [/showif] [/search] Donovan -- Donovan Brooke WebDNA Software Corporation http://www.webdna.us **[Square Bracket Utopia]**
Donovan Brooke
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Grep Ampersands (2008)
[if] and [showif] - A solution (2002)
another url question (2000)
carriage returns in data (1997)
Search results templates (1996)
PIXO Support (1997)
Re:no [search] with NT (1997)
catagories (1997)
Search returns all, not 20 (1997)
Exclamation point (1997)
Displays by Categories (2000)
WebMerchant 1.6 and SHTML (1997)
shownext not showing next...still r2 (1997)
New Guestbook Source (1997)
New Command prefs ... (1997)
flushdatabases (2000)
RE: Sorting error (1997)
cookie length (1998)
emailer on Windows Beta 18 (1997)
Include vs. lookup? (1998)