decryptioin problems - urgent

[tariel]

Hi !

I have a data in a database encrypted using MySQL statement
PASSWORD() and therefore looks like this " 52f23dd7370c1c7b" for example. How I can get(decrypt) the data to a normal format, like text ?
Can anyone help ?

[bastien]

in mysql docs...i know that mysql stores passwords encrypted in the users table...i suspect this is one way encryption and cannot b undone....

the normal way to verify the user to the compare the inputted user password to the encrypted on by encrypting the inputted one with the same encryption method...i don't believe there is a way to get the plain text version of the password from the db...

[herve]

Hi,

extract from MySQL doc (manual.txt, line 11240) :

" PASSWORD() encryption is non-reversible "

which is logical, otherwise useless feature.

Hervé.

[Ph0eniX]

Originally posted by tariel
Hi !

I have a data in a database encrypted using MySQL statement
PASSWORD() and therefore looks like this " 52f23dd7370c1c7b" for example. How I can get(decrypt) the data to a normal format, like text ?
Can anyone help ?

Why would you need to decrypt it unless you have evil intetions?

[tariel]

So sad...
But thanks anyway to everyone.

To Ph0eniX: I'm working now on one application where they have different users and i wanted to "decrypt it" so that admins could see the passwords of other users. And the passwords were stored encrypted with PASSWORD(). It's wasn't made by me. :mad: .

BTW is ENDODE() function reversible ? Can i use DECODE with it ?

[tariel]

I tried to use the ENCODE function. My script is something like this:

 
if(!($insert = mysql_query("INSERT INTO ct_assistant VALUES(NULL,'$student_id','$a_username', ENCODE('$ct_assistant_pwd'))",$con)))
{
                      Error(sprintf("Internal Error %d:%s\n",mysql_errno(),mysql_error()));
                      exit();
            }

but mysql gives me an error. Does anyone know why ?

[Ph0eniX]

Originally posted by tariel
So sad...
But thanks anyway to everyone.

To Ph0eniX: I'm working now on one application where they have different users and i wanted to "decrypt it" so that admins could see the passwords of other users. And the passwords were stored encrypted with PASSWORD(). It's wasn't made by me. :mad: .

BTW is ENDODE() function reversible ? Can i use DECODE with it ?

Administrators should not be able to see anyone's password in a well designed system. You can still use the existing user accounts for your application by encrypting the user input and comparing it against the one in the database. That's how authentication stuff is done. Administrators should have the power to reset users passwords but not to view them.

[tariel]

Originally posted by Ph0eniX


Administrators should not be able to see anyone's password in a well designed system. You can still use the existing user accounts for your application by encrypting the user input and comparing it against the one in the database. That's how authentication stuff is done. Administrators should have the power to reset users passwords but not to view them.

Yep, I understand what u mean, but that was one of the requirements for that system from the manager. It's not my idea. But i'll think about it.