PLMasterSSB (2013-07-20 13:46:41)

---

Sup guys,
Everytime someone registers to my site their password are turned into a whole bunch of numbers and letters, from what u heard converted into a hash. Then when they try to login, they say it says Wrong Usernane or Password.

Guys,
I really need help on how to fix this

---

angelrulez7 (2013-07-21 13:55:36)

---

Check in register for where the password submits.

Alot of stupid scripts use md5, which isn't recommended. But it still works.

If using md5, go to the checklogin page (that submits the form) and where it says something like

$password = $_POST['password'];

Change to
$password = md5($_POST['password']);

---

PLMasterSSB (2013-07-21 18:14:20)

---

its not working. this time it turns the password into a bunch of jibberish.

---

(Capt.)Orb (2013-07-21 22:15:13)

---

That's the point so it's safe...-SSB

---

PLMasterSSB (2013-07-22 02:34:42)

---

Then they can never login

---

klubadmin (2013-07-22 02:49:18)

---

What you want to do:

Person enters their (whatever) that's hashed into a form, right?

When they enter it, check:


Obviously you can't just copy/paste, but that's how life is as a web dev. I don't know your exact code, so you'll have to change "whatever_hash_you_use()" to that and stuff, but that should then allow them to login right.

UNLESS you meant their usernames are hashed, in which case you messed up and should redo that entirely because hashing usernames is unnecessary and hard (if not impossible) to reverse.

---