[thelist] md5 hashed password problem

Bob Meetin - 303-926-0167 - www.dottedi.biz bobm at dottedi.biz
Wed Aug 15 09:53:04 CDT 2007


according to phpinfo() - client api version = 5.0.27 on the old site and 
4.1.21 on the new site (hostgator).  Bananas works...

OLD SITE:

mysql> select password("bananas");
+-------------------------------------------+
| password("bananas")                       |
+-------------------------------------------+
| *9E303C97B1C59D393AFCCAEB156C148C1F9E0D67 |
+-------------------------------------------+
1 row in set (0.00 sec)

NEW SITE:

mysql> select old_password("bananas");
+-------------------------+
| old_password("bananas") |
+-------------------------+
| 0b0d276260c19cd1        |
+-------------------------+
1 row in set (0.00 sec)

-----------------------------
select * from members where login='some_member' AND
   password=OLD_PASSWORD('entered_password')

The above line is to confirm the problem? I would have to know the passwords and of course I am not big brother (yet).  It's about 200 users thus far, so would be annoying to have to notify them to reset their passwords. Yes I could write a script to do this, but seems wasteful and shameful.

-Bob 





More information about the thelist mailing list