Password Salting!
#3

Should be. Execute these queries through phpMyAdmin or another client. To generate random salts you can use something like:
PHP код:
UPDATE testtable SET salt SHA1(CONCAT(UUID_SHORT(), 'keystring')) 
Replacing keystring with a random sequence of characters of your choice. I've done this because UUID_SHORT(), while unique, is predictable.

Next, update the actual passwords.
PHP код:
UPDATE testtable SET pass SHA1(CONCAT(saltSHA1(pass))) 
You can use any combination of functions to generate the password, just make sure you remember it because you will need it in your script.

PHP код:
SELECT FROM testtable WHERE user '%s' AND pass SHA1(CONCAT(saltSHA1('%s'))) 
Reply


Messages In This Thread
Password Salting! - by iBeast - 22.02.2014, 15:31
Re : Password Salting! - by S4t3K - 22.02.2014, 15:38
Re: Password Salting! - by Vince - 22.02.2014, 15:50

Forum Jump:


Users browsing this thread: 2 Guest(s)