Encrypting and Un-encrypting A String

wscreate

I am using a Redhat Linux 7.1 box with Apache 1.3.26, and PHP 4.2.2

I want to take a string (password) that a user chooses and enter it into a MySQL database, but I want to encrypt it first. Secondarily, I want to be able to un-encyrpt the password so it can be viewed securely.

Can someone offer advice as to what PHP function will achieve this?

By the way, I have RTFM already, but am confused as there seems to be more than one option to do this, and I want to use the best, most secure method. Thus, my question.

Thanks.

planetsim

Why? I see no point encrypting then decrypting something. Never have a password that is able to be decrypted. Hackers will love it.

if you still wont to. use m_encrypt i think and it has a partner. I suggest searching the manual for encrypt.

wscreate

Yes, I understand the debate about how some feel it is not necessary to encrypt data in a database. However, it makes some people feel all warm and fuzzy to know that their important data is encrypted.

Thanks for the info.

xwin

Noo... why you need it decrypted in the database. That's silly.

Use md5(password)

That will generate a 32 character hexidecimal value (128 bit).

In the mySQL db, have those hex values stored in a table.

Then, on the php login form, when they enter their password, change it to an md5 value, and match it against the md5 value in the database. This is how a lot of forums (Invision Power Board) do it. One-way encryption.