Member Avatar for infoitmanoj

I need to update my records normal password into Md5 passwords.my query was like that

UPDATE testing SET password = MD5('Manojano234')
This query was working fine but i need to add plain text also

  • 3 Contributors
  • 2 Replies
  • 214 Views
  • 4 Days Discussion Span
  • Latest Post Latest Post by Taywin
Member Avatar for jwenting

you NEVER, EVER want to store plain text passwords. It's an invitation to getting your users' accounts stolen, and most people use the same username and password in a lot of places...

You also NEVER, EVER, want to use MD5 as it's not secure at all.
https://crackstation.net/hashing-security.htm read this as to why.
Also look at https://www.youtube.com/watch?v=8ZtInClXe1Q and https://www.youtube.com/watch?v=b4b8ktEV4Bg and https://www.youtube.com/watch?v=y4GB_NDU43Q

commented: well said +15
Member Avatar for Taywin

If you want to verify the password user entered, simply rehash the plain text password using the same method you do when you save the password into the database. It should be equal. Thus, you DO NOT need to save plain text password. If a user calls for "Forget Password" force the user to RESET the password instead.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.