Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 12 Sep 2011, 22:08
fleccy fleccy is offline
 
Join Date: Jun 2003
Real name: Andrew
External Site login from application (salt, MD5 issue)

Hi all,

I've been pulling my hair out trying to figure out what's wrong. I think my method is wrong.

The code works fine with plain text passwords but I can't seem to figure out how to use salt!


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Thanks for your time

Last edited by fleccy; 14 Sep 2011 at 02:22.
Reply With Quote
  #2  
Old 16 Sep 2011, 00:24
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
I don't see how you're getting the salt value, but maybe that's what you mean when you say you can't figure out how to use it.

I think I'd make a "check password" function where you pass it the username and password and it returns true or false. Maybe like:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.


(BTW, I haven't tried this at all).

Last edited by kh99; 16 Sep 2011 at 13:32. Reason: added escape_string, fixed typos
Reply With Quote
  #3  
Old 16 Sep 2011, 12:47
fleccy fleccy is offline
 
Join Date: Jun 2003
Real name: Andrew
Thanks for your help. I still can't seem to get it working! Not sure where I'm going wrong, I need it to echo Accept or Denied if the password is correct but I keep going wrong somewhere.
Reply With Quote
  #4  
Old 16 Sep 2011, 13:36
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
It works for me, after fixing a couple of typos in the code I posted (I've fixed them above as well). I used code like this to test it:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.


One thing: I don't know where your password is coming from, but I think the vb code runs the password through md5 in javascript before sending it, but also has to allow for browsers with javascript disabled. So when it checks the password, it checks both ways. I guess you could do the same thing by using this code:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 07:45.

Layout Options | Width: Wide Color: