Programming Forums
User Name Password Register
 

RSS Feed
FORUM INDEX | TODAY'S POSTS | UNANSWERED THREADS | ADVANCED SEARCH

Reply
 
Thread Tools Display Modes
Old Aug 22nd, 2005, 3:08 PM   #21
OpenLoop
Expert Programmer
 
OpenLoop's Avatar
 
Join Date: May 2005
Location: East Lansing, MI
Posts: 663
Rep Power: 4 OpenLoop is on a distinguished road
OH, I though we were discussion the MD5() funtion in SQL not PHP because that's what I used to encrypt the data in the database. I didn't know at first that PHP had the same function.
OpenLoop is offline   Reply With Quote
Old Aug 22nd, 2005, 3:10 PM   #22
Polyphemus_
Expert Programmer
 
Polyphemus_'s Avatar
 
Join Date: Aug 2005
Location: Rotterdam, the Netherlands
Posts: 942
Rep Power: 3 Polyphemus_ is on a distinguished road
Quote:
Originally Posted by Eryk
Logic errors, not syntax.

For example, when checking passwords if you encrypt input on the client side and you check them with JS disabled, it won't come out properly. The best idea is to just do it all in PHP.
how would you do that in PHP? When you use php, it first has to be sent over the net unencrypted, so then you won't need all the encryption stuff anyway.
Polyphemus_ is offline   Reply With Quote
Old Aug 22nd, 2005, 3:19 PM   #23
Eryk
Programmer
 
Join Date: Jul 2005
Posts: 62
Rep Power: 3 Eryk is on a distinguished road
I think you have a twisted view of what encryption is for. If you wanted it for transfering stuff over the net, then you need an SSL cert, not JS. The encryption is for it to be protected in the database, so someone can't just sit there and get all the passwords.
Eryk is offline   Reply With Quote
Old Aug 22nd, 2005, 4:28 PM   #24
Lich
Professional Programmer
 
Lich's Avatar
 
Join Date: May 2005
Location: Detroit
Posts: 254
Rep Power: 4 Lich is on a distinguished road
Send a message via AIM to Lich Send a message via MSN to Lich
screw javacscript in thie regard. password(); works great for such a thing, as does md5(); using PHP, then stick the encrypted stuff into the database
__________________
--John Cruz
Web Developer
www.cruzweb.net
Lich is offline   Reply With Quote
Old Aug 22nd, 2005, 4:30 PM   #25
Polyphemus_
Expert Programmer
 
Polyphemus_'s Avatar
 
Join Date: Aug 2005
Location: Rotterdam, the Netherlands
Posts: 942
Rep Power: 3 Polyphemus_ is on a distinguished road
Quote:
Originally Posted by Eryk
I think you have a twisted view of what encryption is for. If you wanted it for transfering stuff over the net, then you need an SSL cert, not JS. The encryption is for it to be protected in the database, so someone can't just sit there and get all the passwords.
you're right at that point
Polyphemus_ is offline   Reply With Quote
Old Aug 22nd, 2005, 5:26 PM   #26
OpenLoop
Expert Programmer
 
OpenLoop's Avatar
 
Join Date: May 2005
Location: East Lansing, MI
Posts: 663
Rep Power: 4 OpenLoop is on a distinguished road
Quote:
Originally Posted by Lich
screw javacscript in thie regard. password(); works great for such a thing, as does md5(); using PHP, then stick the encrypted stuff into the database
lol that's what i ended up doing.
OpenLoop is offline   Reply With Quote
Reply

Bookmarks

« Previous Thread in Forum | Next Thread in Forum »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump




DaniWeb IT Discussion Community
All times are GMT -5. The time now is 5:05 PM.

Powered by vBulletin® Version 3.7.0, Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Copyright ©2007 DaniWeb® LLC