Chockstone Forum

      Sponsored By
      ROCK
   HARDWARE

Chockstone Photography

Australian Landscape Prints

Chockstone Forum - Chockstone Feedback

Provide Feedback About This Website

Topic Date User

ummm hacked??? 20-Dec-2006 At 11:48:05 AM Mike

Message

Haven't got time to look into this just now. But if someone can dig up some VB script code for ASP that will do this that would be handy. I'll get onto it after the hols.
___

What you want is called a hash, which is basically an operation you perform on some data that produces a completely different set of (seemingly) random data. It is easy to generate a hash from some data, but not feasible to get the data back from the hash. Two very similar sets of source data should produce two very different sets of hashed data. Identical source data will produce an identical hash though, so what unix used to do was create a random two letter 'salt' and prefix the password with that, and then prefix the saved hashed data with it, eg to encrypt the password the first time:

Salt=SS (random two letter data)
Password=PPPPPPPP (users password)
Hash=HHHHHHHH (hashed password)
Stored hash = SSHHHHHHHH (salt + hashed password)

Then when the user wants to log in, you get the salt from the stored hash, prefix it to the users password, calculate the hash, and see if it matches the stored hash (without the salt)

Easy to do under .NET where all the crypto functions are accessible. You'll probably need to find a 3rd party class to do it under asp...