If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

 
Go Back  dBforums > Database Server Software > MySQL > Mysql encrpyted password

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 06-22-04, 23:20
linuxnewb linuxnewb is offline
Registered User
 
Join Date: May 2004
Posts: 11
Mysql encrpyted UPDATED

What I want ot be able to do is enter data into mysql database so that it is encrypted, but still be able to
select * from saiddatebase where encrypteddata ="";

I still want to be able to use the data, but it must be encrypted.

Last edited by linuxnewb; 06-26-04 at 13:30. Reason: changed question
Reply With Quote
  #2 (permalink)  
Old 06-24-04, 18:11
georgmx georgmx is offline
Registered User
 
Join Date: Jun 2004
Posts: 1
Thumbs up the password function

Yes you can if you use the "password" function.
Something like:

SELECT * FROM USERS WHERE PASSWORD = PASSWD('TEST');

Regards.
Reply With Quote
  #3 (permalink)  
Old 06-25-04, 11:51
smithhayward smithhayward is offline
Registered User
 
Join Date: Apr 2003
Location: Edison, NJ / Oakland, NJ (Work)
Posts: 32
Smile MD5 is more secure

I don't know if your implementation is through the web with something like PHP, but you'd be better off using MD5 to store passwords. Using a javascript version (available for free online somewhere) to encode the password before transmitting the form to the server keeps passwords from passing in clear text between the browser and the server. You store the MD5 version of their password in your database and when they login you compare the MD5 value in the db and the MD5 value passed by the login form.

Just a suggestion. I don't know how sensative you're login info is. I generally classify login/password information as the highest level of information and no matter what I implement I protect it the best I can.

This is all, of course, if you cannot use SSL. (and combined is even better)
__________________
-----------------------------------
Smith Hayward
-----------------------------------
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On