DB question

[LordVolk]

Where does the MD5 hash get put in the DB?

[janvier123]

account.dbo.user_profile

[LordVolk]

Thanks

[janvier123]

Dont post "thanks" but press
you may get a warning about that so ...

[=Warmonger=]

I find it quite awkward how on both inserts of account information. USER_PROFILE passwords MD5(32) hashed and TBL_USER is not... Has anyone tried using hashed passwords in TBL_USER? Quite weird how they would hash one tables passwords for security yet you can just return rows from TBL_USER and get all the original passwords without cracking the hash.

[Nosferatu.]

well you never , never in you live can crack a md5 hash ) That is a "hash" not a endcoded string.

and Yes you can Restore USER_PROFILE with Tbl_user

PHP Code:


$con = @mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']); 
 
$result1 = mssql_query("SELECT user_no,user_id,user_pwd FROM account.dbo.Tbl_user",$con) or die('error1');

while($row1 = @mssql_fetch_row($result1)) { 

$result1 = mssql_query("INSERT INTO account.dbo.USER_PROFILE (user_no,user_id,user_pwd,resident_no,user_type,login_flag,login_tag,ipt_time,login_time,logout_time,user_ip_addr,server_id) VALUES ('".$row1[0]."','".$row1[1]."','".md5($row1[2])."','801011000000','1','0','Y','',null,null,null,'000')",$con) or die('error2');

} 


[Decima]

Originally Posted by Warmonger1337

I find it quite awkward how on both inserts of account information. USER_PROFILE passwords MD5(32) hashed and TBL_USER is not... Has anyone tried using hashed passwords in TBL_USER? Quite weird how they would hash one tables passwords for security yet you can just return rows from TBL_USER and get all the original passwords without cracking the hash.

the reason its like that, is because tbl_user isnt really even used, it was for website login and such at sometime, but if you try it, u dont even have to make an entry in tbl_user, just user_profile, and ur account will work just fine

and @scott, seems pretty funny to me that u promise all this great stuff for ur server, like TWO new classes, but u have to ask how to add coins, and didnt know which table used the hash for the password *****