Password??

[Anon]

Hi all,

I would like to do the following stuffs.

1. User Password supplied in Registration

2. Encrypt the supplied password

3. store in database

4. if user forgot password and request to email back to them

5. retrieve the encryped password from db

6. decrypt the password

7. send back to user via email

I would like to ask the way of
encrypting && decrypting password in php?
something like symmetric cryto-system?

Regards,
Kyo

[Anon]

dear kyo tsui

i had one problem if you could solve

am using php with mysql

i am using an script with username and password
and then giving submit button click

but in the browser it shows me mine password

how can i do that invisible or look in any other fomat

i would be much obliged to you
as i\'m trying to solve this problem since last 2 weeks

thanx

mine email is

[e-mail]

niraj

[Anon]

You can simply
change your input tag.
Then it´d be shows in ********

Write password instead of text
in the type field:

<input type="password" blablabla>

/Sebbe

[Anon]

Im not sure my answer will satisfy you bit let me tell you the technique Ive seen user somewhere else.

You never need to DeCrypt the password.

Why?

When user account is created, password is encrypted using crypting routine and stored in the database. Whenever user logs in, his current login password text is encrypted again and compared to original encrypted pasword through same crypting routine.

If passes match user is passed through logon.

Advantage of that is that even if someone gets your file with passwords all he sees is crypted passwords he cannot use to logon.

If password is lost and user requests new one.. new one is created and crypted and stored to replace old one, and is also sent to him.

L

[Anon]

Hi,
Thkx for help. However, I need to decrypt the password. Let's look at this example.

1. user registration password = "1234"

2. encrypted as something like "abcd"

3. user now forgetting the password "1234"
   and request a email of the password

4. the system decrypt "abcd " back to "1234" and email to user.

note that I need decrypt it such that user can user his meaningful password "1234" but not "abcd"

Caught what I meant for? 🙂

Regards,
Kyo

[Anon]

Caught what I meant for? 🙂

Yes, but that's not what s/he is saying to do. Instead:

[same] 1. user registration password = "1234"
[same] 2. encrypted as something like "abcd"
[same] 3. user now forgetting the password "1234"
and request a email of the password

[different] 4. Create new password = "5678",
encrypt and store as "efgh",
and mail the new password "5678" to the user.

Now you can use one-way function to do the crypting.

[Anon]

I havent tried it ever but this should work.

Try it -

<?php

$key="asdf";
$text="COME TO DADDY";

$encrypted = mcrypt_cbc(MCRYPT_TripleDES, $key, $input, MCRYPT_ENCRYPT);

$decrypted = mcrypt_cbc(MCRYPT_TripleDES, $key, $encrypted_data, MCRYPT_DECRYPT);

echo ("Text ".$text);
echo ("Encrypted ".$encrypted);
echo ("Decrypted again ".$decrypted);

?>

[Anon]

In 7th line change $input into $text

and change in 7th and 9th line word: mcrypt_cbc into mcrypt_ecb

[Anon]

Yes, but that's not what s/he is saying
to do. Instead:
[different] 4. Create new password
= "5678",
encrypt and store as "efgh",
and mail the new password "5678" to
the user.

Exactly Kirk. As we all know noone recycles passwords. It is a good practice to create a new one and Email it to user.

L.

[nguip]

Hi...

I'm looking for the same solution. Does this script work ?

[Anon]

This definitely works in PHP4

<?php

DEFINE ("Keysize","V28r4aaj0Gf3lrjB0");

$text="COME TO DADDY";

$td = mcrypt_module_open (MCRYPT_TripleDES, "", MCRYPT_MODE_ECB, "");
$iv = mcrypt_create_iv (mcrypt_enc_get_iv_size ($td), MCRYPT_RAND);

$encrypted = mcrypt_cbc(MCRYPT_TripleDES, (Keysize), $text, MCRYPT_ENCRYPT, $iv);
$decrypted = mcrypt_cbc(MCRYPT_TripleDES, (Keysize), $encrypted, MCRYPT_DECRYPT, $iv);

echo "This is iv $iv<br>";
echo "Text $text<br>";
echo "Encrypted $encrypted<br>";
echo "Decrypted again $decrypted<br>";

?>

[Anon]

But it doesn't return the same value every time....

Found I had to use

<?php

function enc($text, $cryp) {
DEFINE ("Keysize","V28r4aaj0Gf3lrjB0");

if ($cryp == 'encryp') {
return mcrypt_cbc(MCRYPT_TripleDES, (Keysize), $text, MCRYPT_ENCRYPT);
} elseif($cryp == 'decryp') {
return mcrypt_cbc(MCRYPT_TripleDES, (Keysize), $text, MCRYPT_DECRYPT);
} else {
err_msg();
}

}

?>
and call enc as @ to suppress errors