PHP md5 Login Script Help

[Rdubya]

Hi All,

I really can't identify where my error is here--any help would be much appreciated:

When a user registers- the following information is sent to the DB

$sql="INSERT INTO ... (..., ..., ..., password, ..., ... )
VALUES (...,..., ..., 'md5($password)',..., ...)";
----------------------------
when i try logging in using this:

$check3 = "SELECT * FROM ...
WHERE ...
AND password = '".md5($_POST['pass'])."'";

-----------------------

When I remove the last line of $check3 everything works fine. I am pretty confident it has to do with the way my passwords are stored and the way password is trying to match the hashed passwords.

Please let me know if you need any other information.

Thanks.
Ryan

[fady10]

Try to separate the hashing operation from the inserting and selecting operations.
$password = md5($password);
Then use the new $password variable in your sql statement.

Make sure that the password is stored in your table hashed.


Regards,
Fady Joseph
iFunny; The funniest blog ever ! funny comics and pictures

[Rdubya]

That did it! Very much appreciated!