Password Validation For Login

aroul2k

Hi,

I'm running a MySQL query statement for password and username validation.

SELECT user_id, first_name FROM users WHERE username='john' AND password=PASSWORD('john99');

Seems that the query doesn't return anything eventhough password='john99' exist

Help me plz.

bubblenut

PASSWORD('john99') exist :rolleyes:

aroul2k

Hey, I've got the solution. It s'thing to do with MySQL 4.1

\MySQL 4.1, PASSWORD(), and Login
Posted by: Larry (IP Logged)
Date: January 20, 2005 11:26AM

In version 4.1 of MySQL, the PASSWORD() function has changed. This can cause problems with scripts in the book, specifically the registration/login examples. There are a couple of solutions:

Change references to the PASSWORD() function to OLD_PASSWORD().

Redefine your password columns as being 41 characters long, not 16. Then continue to use the PASSWORD() function. This will only work if you've only used version 4.1 (in other words, passwords encrypted with PASSWORD() in version 4.x or MySQL and earlier won't match up right).

Best Wishes,
Larry

Writer/Web Developer/Instructor
Forum Moderator

mrhappiness

http://dev.mysql.com/doc/mysql/en/encryption-functions.html
The PASSWORD() function is used by the authentication system in MySQL Server, you should not use it in your own applications. For that purpose, use MD5() or SHA1() instead.