Posted by Simon on 05/27/05 18:36

"roger" <pageme@ntlworld.com> wrote in message
news:x5Hle.419$%h4.286@newsfe3-win.ntli.net...
> When a MySql DB has passwords encrypted using md5() from a php script, is
> there a way of returning the unencrypted data if the site key is known or
> is
> it only one way encryption.
>

Technically it is possible, but it is near impossible to do.
The idea is that if you think you know the password, md5() it, if it matches
the one on record you have a match. Otherwise try again.

That way if you crack someone data, you might not be able to use the
passwords.

Simon

[Back to original message]