See user's password

Results 1 to 3 of 3
  1. #1
    With Coffee blade99 is offline
    MemberRank
    Jul 2011 Join Date
    Milky GalaxyLocation
    395Posts

    See user's password

    how can i see all users with their passwords in db?


  2. #2
    PwrGames PwrDex is offline
    MemberRank
    Jul 2011 Join Date
    /var/log/cabalLocation
    793Posts

    Re: See user's password

    No way, because the database storing as hash..

  3. #3
    Leech feeder. lifestream is offline
    MemberRank
    Oct 2008 Join Date
    855Posts

    Re: See user's password

    When you register, the sql uses pwdencrypt() and stores only hash.

    So when yhe code runs and user logs in - the db is compared for a hash version of the database.
    The real password isnt stored.

    You can use SQL compare function - but that wont get you user password.
    http://technet.microsoft.com/en-us/l.../dd822792.aspx

    If this is so you could change forgotten passwords, then create a php etc function for it (that compares and then inserts new password).

    However mailing user "forgotten" password... well..not going to work - it doesnt exist in database.

    This way, even if DB gets hacked - they dont get user passwords, only hashes.

    You can edit the register procedure and add non hashed password and user id t oa new table for later use...
    Last edited by lifestream; 05-10-13 at 11:16 AM.



Advertisement