Databse containing username and pass

[axman505]

If i have a database containg username and pass where entries are inserted like this:

INSERT INTO `users` ( `user` , `pass` )
VALUES (
'user', PASSWORD( 'pass' )
);

How would i go about verifying this against a username and password used to log into something?

 

[axman505]

i solved my own problem .. i can simply to md5($password) to convert to the a md5 hash for comparison

 

[sleipnir214]

You can also perform a query like:

SELECT count(user) FROM users WHERE pass = password(<user-given password>)

______________________________________________________________________
TANSTAAFL!

 

[axman505]

in my case that would read:

SELECT count(user) FROM users WHERE pass = md5(<user-given password>)

 

[sleipnir214]

Are you inserting the passwords as md5 hashes? Your original post used MySQL's password() function. ______________________________________________________________________
TANSTAAFL!

 

[axman505]

sorry about that .. originally thats what i decided, but now im going with md5

 

[sleipnir214]

So long as you match hashes.... ______________________________________________________________________
TANSTAAFL!