Need php code for md5

[cuddlezz]

The code below will not read the encrypted passwords in cabal_auth_table, Im pretty sure dbo.fn_md5 was used to encrypt them so if any1 has any ideas to get this script to read passwords in that table please help.


if($muweb_vote['md5'] == 0){
$user_proverka = mssql_query("SELECT ID FROM cabal_auth_table WHERE ID='$user'");
$username_ok = mssql_num_rows($user_proverka);
$pass_proverka = mssql_query("SELECT Password FROM cabal_auth_table WHERE Password='$pass' and ID='$user'");
$pass_ok = mssql_num_rows($pass_proverka);
$login_res = mssql_query("SELECT * FROM cabal_auth_table WHERE Password='$pass' and ID='$user'");
$login = mssql_num_rows($login_res);
}

if($muweb_vote['md5'] == 1){
$user_proverka = mssql_query("SELECT ID FROM cabal_auth_table WHERE ID='$user'");
$username_ok = mssql_num_rows($user_proverka);
$pass_proverka = mssql_query("SELECT Password FROM cabal_auth_table WHERE Password=[dbo].[fn_md5]('$pass''$user') and ID='$user'");
$pass_ok = mssql_num_rows($pass_proverka);
$login_res = mssql_query("SELECT * FROM cabal_auth_table WHERE Password=[dbo].[fn_md5]('$pass''$user') and ID='$user'");
$login = mssql_num_rows($login_res);
}


Edit* I think I was wrong about the encryption I changed

$pass_proverka = mssql_query("SELECT Password FROM cabal_auth_table WHERE Password=[dbo].[fn_md5]('$pass''$user') and ID='$user'");
$pass_ok = mssql_num_rows($pass_proverka);
$login_res = mssql_query("SELECT * FROM cabal_auth_table WHERE Password=[dbo].[fn_md5]('$pass''$user') and ID='$user'");
$login = mssql_num_rows($login_res);
}

TO

$pass_proverka = mssql_query("SELECT Password FROM cabal_auth_table WHERE Password=[dbo].[fn_md5]('$pass') and ID='$user'");
$pass_ok = mssql_num_rows($pass_proverka);
$login_res = mssql_query("SELECT * FROM cabal_auth_table WHERE Password=[dbo].[fn_md5]('$pass') and ID='$user'");
$login = mssql_num_rows($login_res);
}

And wala I can log in >.>

 

[chumpywumpy]

Just use PHP's native MD5 encryption. The only reason we use xp_md5 is because MSSQL 2000 (Satan's gift to DBA's) doesn't have any native encryption that can be used for password (2005 and later does have native MD5).

<?php
$pass_proverka = mssql_query("SELECT Password FROM cabal_auth_table WHERE Password=".md5('mypassword')." and ID='.$user.'");
$pass_ok = mssql_num_rows($pass_proverka);
?>