[ReneG]

Quote:

Originally Posted by FireCat Of course... But its also with EVERY hashing system. Before you hash a password you can use printf for example..

But there is a difference between intercepting the query

Код:

SELECT * FROM `users` WHERE `pass` = sha1('fuckme123')

and

Код:

SELECT * FROM `users` WHERE `pass` = '0FDF715A80C43F6603E8B8EC9676A45AD18AD8773BDE840F04D65A10157547EA05A67C0BE2F5990151EE9B7D7901C1523375CEE43E51EB7A48F25C712A05240C'

Personally, I'd rather have a hacker get a hold of the second one.