Posted by Han on 12/07/76 11:27

>Does the admin of the server on which the PHP code is running want
>the check to work, or does he want to subvert it?

The admin (the user) wants the check to work.
We are trying to protect the user from the cleaning lady, daughter's
boyfriend, the intern, trajan horses, etc.

>If it's a user's password, why is it in the PHP script (as distinguished
>from a database)? Or are you talking about passwords users enter
>into their clients to log in?

I'm talking about the password that user enters to login.

Your md5 suggestion is doable.
Is there a way to force php interpreter to check it?

[Back to original message]