Posted by Rik on 02/17/07 16:50

On Sat, 17 Feb 2007 07:40:47 +0100, Martin Mandl - m2m tech support
<martin.mandl@gmail.com> wrote:
> according to http://dev.mysql.com/doc/refman/5.0/en/user-names.html
> "MySQL encrypts passwords using its own algorithm."
>

"Note: The PASSWORD() function is used by the authentication system in
MySQL Server; you should not use it in your own applications. For that
purpose, consider MD5() or SHA1() instead. Also see RFC 2195 for more
information about handling passwords and authentication securely in your
applications."

PASSWORD() has been changed between different MySQL versions, so should
not be treated as reliable for anything else then actual MySQL users.
--
Rik Wasmus

[Back to original message]